CWE-476 · NULL Pointer Dereference (page 14)
Page 14 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0009 | Medium | 5.5 | 2025-09-06 | A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a system crash and loss… |
CVE-2025-39725 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list In shrink_folio_list(… |
CVE-2025-39709 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt ha… |
CVE-2025-39708 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatch indicated a possib… |
CVE-2025-39707 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities HUBBUB structure is… |
CVE-2025-39706 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to… |
CVE-2025-39705 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vulnerability [Why] A null pointer derefe… |
CVE-2025-39703 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient sp… |
CVE-2025-39699 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iova_to_phys The riscv_iommu_pte_fetch() function retu… |
CVE-2025-39694 | High | 7.3 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler conta… |
CVE-2025-39693 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_… |
CVE-2025-39692 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() We can't call… |
CVE-2025-39678 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL If metric table address i… |
CVE-2025-39676 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() fu… |
CVE-2025-39675 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() The function m… |
CVE-2025-39674 | Medium | 5.5 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimizati… |
CVE-2025-38735 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invo… |
CVE-2025-38733 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to… |
CVE-2025-38726 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect After the c… |
CVE-2025-38725 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without setting phy_mask for ax… |
CVE-2025-38716 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfs_find_init() The hfs_find_init() method can trigg… |
CVE-2025-38706 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runt… |
CVE-2025-38705 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters (' ', '\n', '\0')… |
CVE-2025-38700 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an… |
CVE-2025-38696 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI… |
CVE-2025-38695 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lp… |
CVE-2025-38694 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() In dib7090p_rw… |
CVE-2025-38693 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_t… |
CVE-2025-38689 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512_status() Problem ------- With CONFIG_X86_DEBUG_FP… |
CVE-2025-38684 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets tes… |
CVE-2025-38683 | Medium | 5.5 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC… |
CVE-2025-36894 | High | 7.5 | 2025-09-04 | In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed… |
CVE-2025-9817 | High | 7.8 | 2025-09-03 | SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service |
CVE-2025-57615 | High | 7.5 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new constructor function allows an attacker… |
CVE-2025-57613 | High | 7.5 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the input() constructor function allows an attac… |
CVE-2025-57612 | High | 7.5 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the name() method allows an attacker to cause a de… |
CVE-2025-57611 | Medium | 5.3 | 2025-09-02 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the dump() method allows an attacker to cause a de… |
CVE-2025-30275 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-30274 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a… |
CVE-2025-30272 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a… |
CVE-2025-30268 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca… |
CVE-2025-30267 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca… |
CVE-2025-30263 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-30262 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-29889 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29888 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29886 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29882 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they ca… |
CVE-2025-29879 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29878 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29875 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-29874 | Medium | 6.5 | 2025-08-29 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-40779 | High | 7.5 | 2025-08-27 | If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4` process will abort w… |
CVE-2025-20262 | Medium | 5.0 | 2025-08-27 | A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in stan… |
CVE-2025-29901 | Medium | 6.5 | 2025-08-26 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2025-9396 | Low | 3.3 | 2025-08-24 | A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing mani… |
CVE-2025-9384 | Low | 3.3 | 2025-08-24 | A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulati… |
CVE-2025-38674 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/prime: Use dma_buf from GEM object instance" This reverts commit f83a9b8c7fd0… |
CVE-2025-38673 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" This reverts commit cc… |
CVE-2025-38672 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-dma: Use dma_buf from GEM object instance" This reverts commit e8afa1557f… |
CVE-2025-38669 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-shmem: Use dma_buf from GEM object instance" This reverts commit 1a148af0… |
CVE-2025-38668 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to res… |
CVE-2025-38665 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode An… |
CVE-2025-38664 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add check for the return v… |
CVE-2025-38659 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that it is the only no… |
CVE-2025-38655 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: add NULL check in DT parse Add a NULL check for the return value o… |
CVE-2025-38648 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32_spi_probe The stm32_spi_probe function no… |
CVE-2025-38646 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band … |
CVE-2025-38645 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check before accessing devi… |
CVE-2025-38641 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure Avoid potential NULL… |
CVE-2025-38635 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davinci_lpsc_clk_register() devm_kasprintf() returns NULL… |
CVE-2025-38634 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-charger: Fix null check for power_supply_get_by_name In the cpcap_us… |
CVE-2025-38632 | Medium | 4.7 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: pinmux: fix race causing mux_owner NULL with active mux_usecount commit 5a3e85c3c397 ("pi… |
CVE-2025-38630 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref fb_add_videomode() can fai… |
CVE-2025-38629 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: scarlett2: Fix missing NULL check scarlett2_input_select_ctl_info() sets up th… |
CVE-2025-38621 | Medium | 5.5 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: md: make rdev_addable usable for rcu mode Our testcase trigger panic: BUG: kernel NULL p… |
CVE-2025-38619 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix list_del corruption If ti_csi2rx_start_dma() fails in ti_csi… |
CVE-2025-8402 | Medium | 4.9 | 2025-08-21 | Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.0, 10.9.x <= 10.9.3 fail to validate import data which allows a sys… |
CVE-2025-38610 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() The get_pd_power_uw… |
CVE-2025-38609 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfr… |
CVE-2025-38606 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss During beacon mi… |
CVE-2025-38605 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() In ath12k_dp_tx_g… |
CVE-2025-38604 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stop() move the call… |
CVE-2025-38597 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port Each window… |
CVE-2025-38589 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: neighbour: Fix null-ptr-deref in neigh_flush_dev(). kernel test robot reported null-ptr-d… |
CVE-2025-38586 | High | 7.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix fp initialization for exception boundary In the ARM64 BPF JIT when prog->… |
CVE-2025-38583 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: clk: xilinx: vcu: unregister pll_post only if registered correctly If registration of pll… |
CVE-2025-38581 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix crash when rebind ccp device for ccp.ko When CONFIG_CRYPTO_DEV_CCP_DEBU… |
CVE-2025-38569 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes as soon as SRIOV VFs are created: kernel… |
CVE-2025-38562 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generate_encryptionkey If client send two se… |
CVE-2025-38559 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intel_pmt_read()… |
CVE-2025-38558 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Initialize frame-based format color matching descriptor Fix NULL pointe… |
CVE-2025-38557 | Medium | 5.5 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A mal… |
CVE-2023-3866 | High | 7.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This patch validate sessio… |
CVE-2025-38543 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: nvdec: Fix dma_alloc_coherent error check Check for NULL return value with dma… |
CVE-2025-38541 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() devm_kasprintf() returns… |
CVE-2025-38526 | High | 7.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The function ice_lag_is_switchdev_running() is b… |
CVE-2025-38522 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent update_locked_rq() calls with NULL rq Avoid invoking update_locked_rq(… |
CVE-2025-38517 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users() alloc_tag_top_us… |
CVE-2025-38516 | Medium | 5.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UF… |