CWE-476 · NULL Pointer Dereference (page 15)
Page 15 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-50075 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Have event probes be consistent with kprobes and uprobes Currently, if a… |
CVE-2022-50073 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null Fixes… |
CVE-2022-50069 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: BPF: Fix potential bad pointer dereference in bpf_sys_bpf() The bpf_sys_bpf() helper func… |
CVE-2022-50068 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix dummy res NULL ptr deref bug Check the bo->resource value before accessing t… |
CVE-2022-50063 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsa_tree_c… |
CVE-2022-50058 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_blk: set number of address spaces and virtqueue groups Commit bda324fd037a ("vdp… |
CVE-2022-50057 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr If ntfs_fill_super() wasn't called then s… |
CVE-2022-50056 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix missing i_op in ntfs_read_mft There is null pointer dereference because i_o… |
CVE-2022-50054 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix NULL pointer dereference in iavf_get_link_ksettings Fix possible NULL pointer d… |
CVE-2022-50049 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: DPCM: Don't pick up BE without substream When DPCM tries to add valid BE connection… |
CVE-2022-50047 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6060: prevent crash on an unused port If the port isn't a CPU port nor a u… |
CVE-2022-50024 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: do not print NULL LLI during error During debugging we have seen… |
CVE-2022-50016 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot It is not yet clear… |
CVE-2022-50015 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet cl… |
CVE-2022-50009 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data There is issue as follows when test f2… |
CVE-2022-50004 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix metadata dst->dev xmit null pointer dereference When we try to transmit… |
CVE-2022-50003 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ice: xsk: prohibit usage of non-balanced queue id Fix the following scenario: 1. ethtool… |
CVE-2022-50002 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY Only set MLX5_LAG_FLAG_NDEVS_READ… |
CVE-2022-49989 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of privcmd_ioctl_dm_op() The error exit of privcmd_ioctl_dm_o… |
CVE-2022-49984 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible f… |
CVE-2022-49977 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead ftrace_s… |
CVE-2022-49974 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix rumble worker null pointer deref We can dereference a null pointer try… |
CVE-2022-49973 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: skmsg: Fix wrong last sg check in sk_msg_recvmsg() Fix one kernel NULL pointer dereferenc… |
CVE-2022-49962 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference in remove if xHC has only one roothub The remove path… |
CVE-2022-49960 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix null pointer dereference Asus chromebook CX550 crashes during boot on v5.17… |
CVE-2022-49955 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Fix RTAS MSR[HV] handling for Cell The semi-recent changes to MSR handling… |
CVE-2022-49947 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix alloc->vma_vm_mm null-ptr dereference Syzbot reported a couple issues introdu… |
CVE-2022-49944 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" The recent… |
CVE-2022-49942 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not… |
CVE-2022-49940 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() A null pointer derefer… |
CVE-2025-38075 | Critical | 9.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may expire on… |
CVE-2025-38070 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: Add NULL check in sma1307_setting_loaded() All varibale allocated by kzall… |
CVE-2025-38059 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid csum tree [BUG] When trying read-only s… |
CVE-2025-38055 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq Currently, using PEBS-via-… |
CVE-2025-38053 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpf_features_check idpf_features_check is used to validate t… |
CVE-2025-38050 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios A kern… |
CVE-2025-38035 | High | 7.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null sk_state_change queue->state_change is set as part of nvmet… |
CVE-2025-38034 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref btrfs_prelim_ref()… |
CVE-2025-38025 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7606: check for NULL before calling sw_mode_config() Check that the sw_mode_c… |
CVE-2025-38023 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfs_get_lock_context in unlock path When memory is insufficient, t… |
CVE-2025-38021 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check of pipe_ctx->plane_state for update_dchubp_dpp Similar to… |
CVE-2025-38020 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not su… |
CVE-2025-38018 | High | 7.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when alloc_page failed We cannot set frag_list to NULL pointer… |
CVE-2025-38007 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogic_input_configured() devm_kasprintf() returns NULL… |
CVE-2025-45525 | Low | 2.9 | 2025-06-17 | A NULL pointer dereference vulnerability has been identified in the JavaScript library microlight version 0.0.7, a lightweight syntax highlighting library. Whe… |
CVE-2025-1698 | Low | 2.8 | 2025-06-11 | Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service. |
CVE-2025-47111 | Medium | 5.5 | 2025-06-10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to applic… |
CVE-2025-33057 | Medium | 6.5 | 2025-06-10 | Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over a network. |
CVE-2025-30321 | Medium | 5.5 | 2025-06-10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-servic… |
CVE-2025-5867 | High | 8.0 | 2025-06-09 | A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/l… |
CVE-2025-25217 | Low | 3.3 | 2025-06-08 | in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. |
CVE-2025-29877 | High | 7.5 | 2025-06-06 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vuln… |
CVE-2025-29876 | High | 7.5 | 2025-06-06 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vuln… |
CVE-2025-29873 | High | 7.5 | 2025-06-06 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vuln… |
CVE-2025-22490 | High | 7.5 | 2025-06-06 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vuln… |
CVE-2025-23100 | High | 7.5 | 2025-06-03 | An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The absence of a NULL check leads to a Denial of Service. |
CVE-2025-31711 | Medium | 5.1 | 2025-06-03 | In cplog service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with no additional execution pri… |
CVE-2025-20677 | Medium | 5.5 | 2025-06-02 | In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges n… |
CVE-2025-20676 | Medium | 5.5 | 2025-06-02 | In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges ne… |
CVE-2025-20675 | Medium | 5.5 | 2025-06-02 | In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges ne… |
CVE-2025-20673 | Medium | 5.5 | 2025-06-02 | In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges ne… |
CVE-2024-54952 | High | 7.5 | 2025-05-29 | MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending speci… |
CVE-2024-22653 | Medium | 4.8 | 2025-05-29 | yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c. |
CVE-2025-37994 | Medium | 5.5 | 2025-05-29 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI d… |
CVE-2025-27701 | Medium | 5.5 | 2025-05-27 | In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this val… |
CVE-2025-37992 | Medium | 5.5 | 2025-05-26 | In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's l… |
CVE-2023-47466 | Low | 2.9 | 2025-05-22 | TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. |
CVE-2025-37974 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device() error return The zpci_create_device(… |
CVE-2025-37972 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer dereference In mtk_pmic_keys_probe, the… |
CVE-2025-37971 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev Commit 42a2f6664e18 ("staging: vc04_s… |
CVE-2025-37958 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a THP, concu… |
CVE-2025-37953 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_deactivate() idempotent Alan reported a NULL pointer dereference in htb… |
CVE-2025-37950 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: convert w_pages… |
CVE-2025-37949 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the… |
CVE-2025-37945 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DS… |
CVE-2025-37938 | High | 7.1 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifier checks the forma… |
CVE-2025-37929 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays Commit a5951389e58d ("arm… |
CVE-2025-37922 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: book3s64/radix : Align section vmemmap start address to PAGE_SIZE A vmemmap altmap is a d… |
CVE-2025-37919 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot Update chip data using dev… |
CVE-2025-37918 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() A NULL pointer derefere… |
CVE-2025-37912 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() As mentioned in the commit baeb… |
CVE-2025-37910 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sys… |
CVE-2025-37900 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix two issues in iommu_copy_struct_from_user() In the review for iommu_copy_struc… |
CVE-2025-37894 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: use sock_gen_put() when sk_state is TCP_TIME_WAIT It is possible for a pointer of ty… |
CVE-2025-4476 | Medium | 4.3 | 2025-05-16 | A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unau… |
CVE-2025-4478 | Medium | 6.5 | 2025-05-16 | A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the… |
CVE-2025-30667 | Medium | 6.5 | 2025-05-14 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-30666 | Medium | 6.5 | 2025-05-14 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-30665 | Medium | 6.5 | 2025-05-14 | NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2023-53146 | Medium | 5.5 | 2025-05-14 | In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is… |
CVE-2025-20071 | Medium | 6.5 | 2025-05-13 | NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2025-30329 | Medium | 5.5 | 2025-05-13 | Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An atta… |
CVE-2025-30320 | Medium | 5.5 | 2025-05-13 | InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-servic… |
CVE-2025-30319 | Medium | 5.5 | 2025-05-13 | InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-servic… |
CVE-2025-29838 | High | 7.4 | 2025-05-13 | Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-29835 | Medium | 6.5 | 2025-05-13 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-40576 | Medium | 4.3 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Prof… |
CVE-2025-45835 | High | 7.5 | 2025-05-12 | A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi fi… |
CVE-2025-37888 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_… |
CVE-2025-37886 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make the wait_context a full part of the q_inf… |