CWE-476 · NULL Pointer Dereference (page 18)
Page 18 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-46592 | Medium | 4.4 | 2025-05-06 | Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-58237 | High | 7.8 | 2025-05-05 | In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execu… |
CVE-2024-55069 | Medium | 5.3 | 2025-05-02 | ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c. |
CVE-2022-21546 | High | 7.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we h… |
CVE-2023-53144 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the… |
CVE-2023-53139 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm… |
CVE-2023-53124 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated… |
CVE-2023-53114 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detec… |
CVE-2023-53113 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NULL-ptr deref in offchan check If, e.g. in AP mode, the link was alre… |
CVE-2023-53110 | High | 7.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() When performing a stress test on SM… |
CVE-2023-53105 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix cleanup null-ptr deref on encap lock During module is unloaded while a pee… |
CVE-2023-53102 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw ice_qp_dis() intends to stop a given queue p… |
CVE-2023-53098 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM… |
CVE-2023-53095 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the p… |
CVE-2023-53093 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be stri… |
CVE-2023-53091 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after journal replay When mounting a crafted ex… |
CVE-2023-53079 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix steering rules cleanup vport's mc, uc and multicast rules are not deleted i… |
CVE-2023-53071 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76_unregister_device() on unregistered hw Trying to probe a mt79… |
CVE-2023-53066 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure th… |
CVE-2023-53058 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "v… |
CVE-2023-53056 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Synchronize the IOCB count to be in order A system hang was observed with… |
CVE-2023-53055 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete() fscrypt_destroy_keyring() must be cal… |
CVE-2023-53049 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() When ucsi_init() fails, ucsi… |
CVE-2023-53044 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate alloc_percpu failure Check alloc_precpu()'s return valu… |
CVE-2023-53038 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() If kzalloc() fails in lpfc_sli… |
CVE-2022-49932 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace Call kvm_init() o… |
CVE-2022-49931 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Correctly move list in sc_disable() Commit 13bac861952a ("IB/hfi1: Fix abba lock… |
CVE-2022-49930 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer problem in free_mr_init() Lock grab occurs in a concurrent sce… |
CVE-2022-49928 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed There is a null-ptr-deref when xps… |
CVE-2022-49925 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ib_core_cleanup() KASAN reported a null-ptr-deref error… |
CVE-2022-49916 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rose_send_frame() The syzkaller reported an issue: … |
CVE-2022-49904 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net, neigh: Fix null-ptr-deref in neigh_table_clear() When IPv6 module gets initialized b… |
CVE-2022-49895 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix decoder allocation crash When an intermediate port's decoders have been e… |
CVE-2022-49894 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix region HPA ordering validation Some regions may not have any address spac… |
CVE-2022-49889 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() On some machines the… |
CVE-2022-49876 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit() When device… |
CVE-2022-49875 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE When using… |
CVE-2022-49869 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() During the error recovery sequence, t… |
CVE-2022-49864 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() ./drivers/gpu/drm/amd/am… |
CVE-2022-49863 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: can: af_can: fix NULL pointer dereference in can_rx_register() It causes NULL pointer der… |
CVE-2022-49848 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-combo: fix NULL-deref on runtime resume Commit fc64623637da ("phy: qcom-qmp… |
CVE-2022-49839 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_sas: Fix error handling in sas_phy_add() If transport_add_device() f… |
CVE-2022-49833 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: clone zoned device info when cloning a device When cloning a btrfs_device… |
CVE-2022-49832 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map Here is the BUG… |
CVE-2022-49831 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: initialize device's zone info for seeding When performing seeding on a zone… |
CVE-2022-49827 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() drm_vblank_init() call d… |
CVE-2022-49825 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in ata_tport_add() In ata_tport_add(), the retu… |
CVE-2022-49824 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in ata_tlink_add() In ata_tlink_add(), the retu… |
CVE-2022-49823 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in ata_tdev_add() In ata_tdev_add(), the return… |
CVE-2022-49810 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing xas_retry() calls in xarray iteration netfslib has a number of places… |
CVE-2022-49806 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_star… |
CVE-2022-49805 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init() lan966x_stats_init() c… |
CVE-2022-49802 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix null pointer dereference in ftrace_add_mod() The @ftrace_mod is allocated by… |
CVE-2022-49797 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test… |
CVE-2022-49796 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit… |
CVE-2025-37794 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Purge vif txq in ieee80211_do_stop() After ieee80211_do_stop() SKB from v… |
CVE-2025-37793 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NU… |
CVE-2025-37792 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function chec… |
CVE-2025-37787 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russ… |
CVE-2025-37784 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP… |
CVE-2025-37783 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check The function dpu_plane_… |
CVE-2025-37781 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-cros-ec-tunnel and… |
CVE-2025-37774 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab->obj_exts is clear in a newly allocated slab page ktest recently report… |
CVE-2025-37772 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cma_netevent_work_handler struct rdma_cm_id has member "… |
CVE-2025-37759 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix handling recovery & reissue in ublk_abort_queue() Commit 8284066946e6 ("ublk: g… |
CVE-2025-37758 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() devm_ioremap() r… |
CVE-2025-37755 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: handle page_pool_dev_alloc_pages error page_pool_dev_alloc_pages could return… |
CVE-2025-37748 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu… |
CVE-2025-23148 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() soc_dev_attr… |
CVE-2025-23147 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master driver may receive a… |
CVE-2025-23146 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpios could be NULL. Ad… |
CVE-2025-23145 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with… |
CVE-2025-23143 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. When I ran the repr… |
CVE-2025-31202 | Medium | 5.5 | 2025-04-29 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, vision… |
CVE-2025-24251 | Medium | 6.5 | 2025-04-29 | The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ve… |
CVE-2025-24179 | Medium | 5.7 | 2025-04-29 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, ma… |
CVE-2025-4003 | Medium | 5.5 | 2025-04-28 | A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalApfsTranslateBlock o… |
CVE-2025-4002 | Medium | 5.5 | 2025-04-28 | A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic. Affected by this issue is the function GetDebugLogFile of the f… |
CVE-2025-46400 | Medium | 5.5 | 2025-04-23 | In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject functio… |
CVE-2025-46399 | Medium | 5.5 | 2025-04-23 | A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function. |
CVE-2025-32818 | High | 7.5 | 2025-04-23 | A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potent… |
CVE-2025-29547 | High | 7.0 | 2025-04-22 | In Rollback Rx Professional 12.8.0.0, the driver file shieldm.sys allows local users to cause a denial of service because of a null pointer dereference from IO… |
CVE-2025-43967 | Low | 2.9 | 2025-04-21 | libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent ima… |
CVE-2025-43966 | Low | 2.9 | 2025-04-21 | libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. |
CVE-2025-39755 | Medium | 5.5 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_driver struct was still only using the… |
CVE-2025-38240 | Medium | 5.5 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr The function mtk_dp_wa… |
CVE-2025-38152 | Medium | 5.5 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear table_sz when rproc_shutdown There is case as below could trigger… |
CVE-2025-38049 | Medium | 5.5 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors Commit 6e… |
CVE-2025-37860 | Medium | 5.5 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_param() Since cited commit, ef100_prob… |
CVE-2020-36789 | Medium | 5.5 | 2025-04-17 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context If a driver… |
CVE-2025-32787 | Low | 3.1 | 2025-04-16 | SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerable to NULL dereference in `DeleteIPv6De… |
CVE-2025-23137 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update Check if policy is NU… |
CVE-2025-23136 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode… |
CVE-2025-23131 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to event_done do_uevent returns the value… |
CVE-2025-22103 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer dereference in l3mdev_l3_rcv When delete l3s ipvlan: ip link d… |
CVE-2025-22099 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init devm_kasprintf() calls can r… |
CVE-2025-22094 | High | 7.3 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' Commit 176cda0619b6 ("powerpc/perf: A… |
CVE-2025-22093 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid NPD when ASIC does not support DMUB ctx->dmub_srv will de NULL if… |
CVE-2025-22092 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix NULL dereference in SR-IOV VF creation error path Clean up when virtfn setup fai… |
CVE-2025-22089 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hw_counters outside of init net namespace Commit 467f432a521a ("R… |