CWE-476 · NULL Pointer Dereference (page 12)
Page 12 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53209 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: Fix possible NULL dereference In a call to mac80211_hwsim_select_tx… |
CVE-2023-53206 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus_core) Fix NULL pointer dereference Pass i2c_client to _pmbus_is_enabled to… |
CVE-2023-53203 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val In order to fix a possible NULL… |
CVE-2022-50336 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add null pointer check to attr_load_runs_vcn Some metadata files are handled be… |
CVE-2022-50334 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() Syzkaller reports a null-ptr-der… |
CVE-2022-50327 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value The return value of acpi_… |
CVE-2022-50317 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: megachips: Fix a null pointer dereference bug When removing the module we wil… |
CVE-2022-50308 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Add checks for devm_kcalloc As the devm_kcalloc may return NULL, the return v… |
CVE-2022-50295 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd() Syzkaller produced th… |
CVE-2022-50280 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: pnode: terminate at peers of source The propagate_mnt() function handles mount propagatio… |
CVE-2022-50277 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose journal… |
CVE-2022-50276 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in power_supply_get_battery_info when kmall… |
CVE-2022-50272 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() Wei Chen reports a kernel… |
CVE-2022-50268 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: mmc: moxart: fix return value check of mmc_add_host() mmc_add_host() may return error, if… |
CVE-2022-50267 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_pci: fix return value check of mmc_add_host() mmc_add_host() may return error… |
CVE-2022-50266 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix check for probe enabled in kill_kprobe() In kill_kprobe(), the check whether… |
CVE-2022-50262 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate BOOT record_size When the NTFS BOOT record_size field < 0, it represen… |
CVE-2023-53198 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: raw: Fix NULL deref in raw_get_next(). Dae R. Jeong reported a NULL deref in raw_get_next… |
CVE-2023-53180 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid NULL pointer access during management transmit cleanup Currently 'ar'… |
CVE-2023-53168 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: usb: ucsi_acpi: Increase the command completion timeout Commit 130a96d698d7 ("usb: typec… |
CVE-2023-53167 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix null pointer dereference in tracing_err_log_open() Fix an issue in function… |
CVE-2023-53150 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Pointer may be dereferenced Klocwork tool reported pointer 'rport' returne… |
CVE-2023-53147 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: add NULL check in xfrm_update_ae_params Normally, x->replay_esn and x->preplay_esn… |
CVE-2022-50244 | Medium | 5.5 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() If device_register() fails… |
CVE-2025-58364 | Medium | 6.5 | 2025-09-11 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization… |
CVE-2025-39772 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded failed, the driver… |
CVE-2025-39765 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: fix ida_free call while not allocated In the snd_utimer_create() function, i… |
CVE-2025-39762 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: add null check [WHY] Prevents null pointer dereferences to enhance funct… |
CVE-2025-39747 | Medium | 5.5 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msm_ioctl_gem_info_se… |
CVE-2025-58144 | High | 7.5 | 2025-09-11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related… |
CVE-2025-9166 | High | 7.5 | 2025-09-09 | A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward me… |
CVE-2025-0009 | Medium | 5.5 | 2025-09-06 | A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a system crash and loss… |
CVE-2025-39725 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list In shrink_folio_list(… |
CVE-2025-39709 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt ha… |
CVE-2025-39708 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatch indicated a possib… |
CVE-2025-39707 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities HUBBUB structure is… |
CVE-2025-39706 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to… |
CVE-2025-39705 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability [Why] A null pointer derefe… |
CVE-2025-39703 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient sp… |
CVE-2025-39699 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iova_to_phys The riscv_iommu_pte_fetch() function retu… |
CVE-2025-39694 | High | 7.3 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler conta… |
CVE-2025-39693 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_… |
CVE-2025-39692 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() We can't call… |
CVE-2025-39678 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL If metric table address i… |
CVE-2025-39676 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() fu… |
CVE-2025-39675 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() The function m… |
CVE-2025-39674 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimizati… |
CVE-2025-38735 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invo… |
CVE-2025-38733 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to… |
CVE-2025-38726 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect After the c… |
CVE-2025-38725 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without setting phy_mask for ax… |
CVE-2025-38716 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfs_find_init() The hfs_find_init() method can trigg… |
CVE-2025-38706 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runt… |
CVE-2025-38705 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters (' ', '\n', '\0')… |
CVE-2025-38700 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an… |
CVE-2025-38696 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI… |
CVE-2025-38695 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lp… |
CVE-2025-38694 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() In dib7090p_rw… |
CVE-2025-38693 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_t… |
CVE-2025-38689 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512_status() Problem ------- With CONFIG_X86_DEBUG_FP… |
CVE-2025-38684 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets tes… |
CVE-2025-38683 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC… |
CVE-2025-36894 | High | 7.5 | 2025-09-04 | In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed… |
CVE-2025-9817 | High | 7.8 | 2025-09-03 | SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service |
CVE-2025-57615 | High | 7.5 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new constructor function allows an attacker… |
CVE-2025-57613 | High | 7.5 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the input() constructor function allows an attac… |
CVE-2025-57612 | High | 7.5 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the name() method allows an attacker to cause a de… |
CVE-2025-57611 | Medium | 5.3 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the dump() method allows an attacker to cause a de… |
CVE-2025-30275 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-30274 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a… |
CVE-2025-30272 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a… |
CVE-2025-30268 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca… |
CVE-2025-30267 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca… |
CVE-2025-30263 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-30262 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-29889 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29888 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29886 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29882 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca… |
CVE-2025-29879 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29878 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29875 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29874 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-40779 | High | 7.5 | 2025-08-27 | If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4` process will abort w… |
CVE-2025-20262 | Medium | 5.0 | 2025-08-27 | A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in stan… |
CVE-2025-29901 | Medium | 6.5 | 2025-08-26 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-9396 | Low | 3.3 | 2025-08-24 | A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing mani… |
CVE-2025-9384 | Low | 3.3 | 2025-08-24 | A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulati… |
CVE-2025-38674 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/prime: Use dma_buf from GEM object instance" This reverts commit f83a9b8c7fd0… |
CVE-2025-38673 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" This reverts commit cc… |
CVE-2025-38672 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-dma: Use dma_buf from GEM object instance" This reverts commit e8afa1557f… |
CVE-2025-38669 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-shmem: Use dma_buf from GEM object instance" This reverts commit 1a148af0… |
CVE-2025-38668 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to res… |
CVE-2025-38665 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode An… |
CVE-2025-38664 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add check for the return v… |
CVE-2025-38659 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that it is the only no… |
CVE-2025-38655 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: add NULL check in DT parse Add a NULL check for the return value o… |
CVE-2025-38648 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32_spi_probe The stm32_spi_probe function no… |
CVE-2025-38646 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band … |
CVE-2025-38645 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check before accessing devi… |