CWE-476 · NULL Pointer Dereference (page 10)
Page 10 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53667 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize Currently in cdc_ncm_check_tx_m… |
CVE-2023-53664 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate() "opp" pointer… |
CVE-2023-53658 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hif_mspi nor mspi is available If neither a "hif_m… |
CVE-2023-53657 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_… |
CVE-2023-53653 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: media: amphion: fix REVERSE_INULL issues reported by coverity null-checking of a pointor… |
CVE-2023-53648 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer smatch error: sound/pci/ac97/… |
CVE-2023-53647 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't dereference ACPI root object handle Since the commit referenced… |
CVE-2023-53643 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: don't access released socket during error recovery While the error recovery wor… |
CVE-2023-53627 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list When freein… |
CVE-2023-53625 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix vgpu debugfs clean in remove Check carefully on root debugfs available… |
CVE-2023-53621 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: memcontrol: ensure memcg acquired by id is properly set up In the eviction recency check… |
CVE-2022-50555 | High | 7.8 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix a null-ptr-deref in tipc_topsrv_accept syzbot found a crash in tipc_topsrv_acce… |
CVE-2022-50538 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in fake_init() In fake_init(), __root_device_register() is pos… |
CVE-2022-50535 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null-deref in dm_resume [Why] Fixing smatch error: dm_resu… |
CVE-2022-50533 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mlme: fix null-ptr deref on failed assoc If association to an AP without… |
CVE-2022-50530 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() Our syzkaller report a… |
CVE-2022-50527 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix size validation for non-exclusive domains (v4) Fix amdgpu_bo_validate_siz… |
CVE-2022-50524 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Check return value after calling platform_get_resource() platform_get_res… |
CVE-2022-50516 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sb_lvbptr I experience issues when putting a lkbsb on t… |
CVE-2022-50509 | Medium | 5.5 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for kmalloc As the kmalloc may return NULL pointer, it should be b… |
CVE-2023-53612 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Simplify platform device handling Coretemp's platform driver is unconve… |
CVE-2023-53603 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer… |
CVE-2023-53599 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390 Fix af_alg_alloc_areq(… |
CVE-2023-53595 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: mcs: Fix NULL pointer dereferences When system is rebooted after creating m… |
CVE-2023-53582 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix… |
CVE-2023-53576 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: null_blk: Always check queue mode setting from configfs Make sure to check device queue m… |
CVE-2023-53566 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix null deref on element insertion There is no guarantee that… |
CVE-2023-53565 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe() id argument being NULL The probe() id argument may be N… |
CVE-2023-53561 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume… |
CVE-2023-53551 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_resume Consider a case where gse… |
CVE-2023-53538 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: btrfs: insert tree mod log move in push_node_left There is a fairly unlikely race conditi… |
CVE-2023-53534 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc As the devm_kcalloc may return NU… |
CVE-2022-50506 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drbd: only clone bio if we have a backing device Commit c347a787e34cb (drbd: set ->bi_bde… |
CVE-2022-50503 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: mtd: lpddr2_nvm: Fix possible null-ptr-deref It will cause null-ptr-deref when resource_s… |
CVE-2022-50501 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for dcoda_iram_alloc As the coda_iram_alloc may return NULL pointe… |
CVE-2022-50481 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() If device_register() fai… |
CVE-2022-50475 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Make sure "ib_port" is valid when access sysfs node The "ib_port" structure mu… |
CVE-2025-39950 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR A NULL pointer… |
CVE-2025-39947 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5_uplink_net… |
CVE-2025-39938 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earl… |
CVE-2025-39937 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Since commit 7d… |
CVE-2025-39936 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() When … |
CVE-2025-39934 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs… |
CVE-2025-52866 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52862 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52860 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52859 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52858 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52857 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52855 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52854 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52853 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52433 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52432 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52428 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52427 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52424 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48729 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48728 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48727 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48726 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-47214 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-47213 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-47210 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44011 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44010 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44009 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44008 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-61668 | | 2025-10-02 | Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0… | |
CVE-2025-59537 | High | 7.5 | 2025-10-01 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1… |
CVE-2025-59150 | High | 7.5 | 2025-10-01 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of… |
CVE-2025-59148 | High | 7.5 | 2025-10-01 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versions 8.0.0 and below… |
CVE-2023-53531 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request timeout handling When doing io_uring benchmark on /dev/nullb0… |
CVE-2023-53523 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb device driver is unloade… |
CVE-2023-53503 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat a… |
CVE-2023-53498 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null dereference The adev->dm.dc pointer can be NULL and d… |
CVE-2023-53497 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called() The vsp1 driver… |
CVE-2023-53483 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc… |
CVE-2023-53480 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset… |
CVE-2023-53476 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() This condition ne… |
CVE-2023-53472 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a… |
CVE-2023-53470 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If dev… |
CVE-2023-53464 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock s… |
CVE-2023-53458 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() When the… |
CVE-2023-53457 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin ma… |
CVE-2023-53451 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential NULL pointer dereference Klocwork tool reported 'cur_dsd' ma… |
CVE-2022-50467 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID An error case… |
CVE-2022-50459 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() Fix a NULL pointer… |
CVE-2022-50453 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several places where we can crash… |
CVE-2022-50452 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cake_init() fails When the default q… |
CVE-2022-50447 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting to connect multiple… |
CVE-2022-50441 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag, fix failure to cancel delayed bond work Commit 0d4e8ed139d8 ("net/mlx5: La… |
CVE-2022-50440 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface co… |
CVE-2022-50425 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly When an extended state c… |
CVE-2025-39920 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem… |
CVE-2025-39906 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of the GPU… |
CVE-2025-39903 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing kernel panic When there are memory-only n… |
CVE-2025-39902 | High | 7.1 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err() re… |
CVE-2025-39897 | High | 7.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper err… |
CVE-2025-39895 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bse… |