CWE-476 · NULL Pointer Dereference (page 18)
Page 18 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53015 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopff_init() only checks the total sum of the… |
CVE-2023-53011 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: enable all safety features by default In the original implementation of dwma… |
CVE-2023-53005 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' Function 'create_his… |
CVE-2023-52994 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: acpi: Fix suspend with Xen PV Commit f1e525009493 ("x86/boot: Skip realmode init code whe… |
CVE-2023-52993 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggeri… |
CVE-2023-52991 | High | 7.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer in skb_segment_list Commit 3a1296a38d0c ("net: Support GRO/GSO frag… |
CVE-2023-52984 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices The probe() functio… |
CVE-2023-52976 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efi_mem_reserve_persistent When iterating on a linked li… |
CVE-2023-52939 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() As commit 183652… |
CVE-2023-52938 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null… |
CVE-2022-49758 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resou… |
CVE-2022-49756 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() sp_usb_phy_probe()… |
CVE-2025-31181 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31180 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31179 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash. |
CVE-2025-31178 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31176 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash. |
CVE-2024-58091 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/O DMA areas are not necessarily backed… |
CVE-2025-21870 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DAI copier w… |
CVE-2024-11499 | Medium | 4.9 | 2025-03-25 | A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restar… |
CVE-2024-10037 | Medium | 4.4 | 2025-03-25 | A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message seque… |
CVE-2025-2588 | Low | 3.3 | 2025-03-21 | A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/… |
CVE-2025-0312 | High | 7.5 | 2025-03-20 | A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama… |
CVE-2025-2487 | Medium | 4.9 | 2025-03-18 | A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return… |
CVE-2025-21864 | High | 7.8 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hitting the W… |
CVE-2025-21857 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix error handling causing NULL dereference tcf_exts_miss_cookie_base… |
CVE-2025-21854 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: sockmap, vsock: For connectible sockets allow only connected sockmap expects all vsocks t… |
CVE-2025-21852 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: net: Add rx_skb of kfree_skb to raw_tp_null_args[]. Yan Zhai reported a BPF prog could tr… |
CVE-2025-21848 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_ap… |
CVE-2025-21847 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() The nullity of sps… |
CVE-2025-21846 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it was reported that the acct(2) system ca… |
CVE-2025-21844 | High | 7.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the… |
CVE-2025-21170 | Medium | 5.5 | 2025-03-11 | Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-servic… |
CVE-2025-27179 | Medium | 5.5 | 2025-03-11 | InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s… |
CVE-2025-27176 | Medium | 5.5 | 2025-03-11 | InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s… |
CVE-2025-27170 | Medium | 5.5 | 2025-03-11 | Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service… |
CVE-2025-24997 | Medium | 4.4 | 2025-03-11 | Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally. |
CVE-2024-56188 | Medium | 5.1 | 2025-03-10 | there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges nee… |
CVE-2025-21833 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE There is a WARN_ON_ONCE to catch an unli… |
CVE-2024-58084 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() Commit 2e49551… |
CVE-2024-58081 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: clk: mmp2: call pm_genpd_init() only after genpd.name is set Setting the genpd's struct d… |
CVE-2024-58080 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-sm6350: Add missing parent_map for a clock If a clk_rcg2 has a parent… |
CVE-2024-58076 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-sm6350: Add missing parent_map for two clocks If a clk_rcg2 has a parent… |
CVE-2024-58073 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp Similar to the r_pipe ss… |
CVE-2024-58068 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized If a driver calls de… |
CVE-2024-58067 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check The devm_kzalloc() function returns… |
CVE-2024-58066 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check The devm_kzalloc() function doesn't… |
CVE-2024-58065 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check The devm_kzalloc() function returns NU… |
CVE-2024-58064 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap(… |
CVE-2024-58062 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference When iterating over the links of a vif… |
CVE-2024-58058 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode i… |
CVE-2024-58052 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table T… |
CVE-2024-58051 | Medium | 5.5 | 2025-03-06 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: Add check devm_kasprintf() returned value devm_kasprintf() can return a NULL… |
CVE-2025-22837 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference. |
CVE-2025-21097 | Low | 3.3 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference. |
CVE-2025-21084 | Low | 3.8 | 2025-03-04 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through through NULL pointer dereference.. This… |
CVE-2025-1877 | Medium | 6.5 | 2025-03-03 | A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Requ… |
CVE-2025-0287 | Medium | 5.1 | 2025-03-03 | Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure… |
CVE-2024-53024 | High | 7.8 | 2025-03-03 | Memory corruption in display driver while detaching a device. |
CVE-2025-20647 | Medium | 6.5 | 2025-03-03 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base st… |
CVE-2022-49733 | High | 7.8 | 2025-03-02 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC There is a small race window at snd_pcm_oss_s… |
CVE-2024-41338 | High | 7.5 | 2025-02-27 | A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/… |
CVE-2025-21814 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set The ioctl and sysfs handlers unconditiona… |
CVE-2025-21810 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() There are… |
CVE-2025-21804 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() The rcar… |
CVE-2025-21799 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns() When get… |
CVE-2025-21798 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: firewire: test: Fix potential null dereference in firewire kunit test kunit_kzalloc() may… |
CVE-2024-58022 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix a NULL vs IS_ERR() bug The devm_ioremap() function doesn't return er… |
CVE-2025-21790 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlan_vnigroup_init() return value vxlan_init() must check vxlan_vnigroup_in… |
CVE-2025-21783 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix crash on error in gpiochip_get_ngpios() The gpiochip_get_ngpios() uses chip_… |
CVE-2025-21779 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel Advertise su… |
CVE-2025-21776 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris… |
CVE-2025-21775 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If skb allocation fails, the pointer to stru… |
CVE-2025-21774 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated … |
CVE-2025-21773 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: fix potential NULL pointer dereference on udev->serial The driver assume… |
CVE-2025-21750 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the return value of of_property_read_string_index() Somewhen betwee… |
CVE-2025-21744 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() On removal of the devi… |
CVE-2024-58021 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: HID: winwing: Add NULL check in winwing_init_led() devm_kasprintf() can return a NULL poi… |
CVE-2024-58020 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf() can return a NULL… |
CVE-2024-58019 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nvkm/gsp: correctly advance the read pointer of GSP message queue A GSP event message con… |
CVE-2024-58012 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params Each cpu DAI should a… |
CVE-2024-58011 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Check for adev == NULL Not all devices have an ACPI companion fwno… |
CVE-2024-58009 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc A NULL sock pointer is pas… |
CVE-2024-57852 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: smc: Handle missing SCM device Commit ca61d6836e6f ("firmware: qcom… |
CVE-2024-57834 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread syzbot report a null-ptr-dere… |
CVE-2025-21723 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix possible crash when setting up bsg fails If bsg_setup_queue() fails, th… |
CVE-2025-21720 | High | 7.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: xfrm: delete intermediate secpath entry in packet offload mode Packets handled by hardwar… |
CVE-2025-21713 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was never set On pSeries, when user attem… |
CVE-2024-57989 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links In mt7925_change_vif_… |
CVE-2024-57988 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() devm_kstrdup() can return a NU… |
CVE-2024-57987 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() If insert an USB dongle which c… |
CVE-2024-57981 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued… |
CVE-2024-57978 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Fix potential error pointer dereference in detach_pm() The proble is on… |
CVE-2022-49731 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and pr… |
CVE-2022-49707 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ext4: add reserved GDT blocks check We capture a NULL pointer issue when resizing a corru… |
CVE-2022-49703 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Store vhost pointer during subcrq allocation Currently the back pointer fro… |
CVE-2022-49699 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: filemap: Handle sibling entries in filemap_get_read_batch() If a read races with an inval… |
CVE-2022-49692 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: phy: at803x: fix NULL pointer dereference on AR9331 PHY Latest kernel will explode o… |
CVE-2022-49688 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afs_getattr consult the server did… |
CVE-2022-49664 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tipc: move bc link creation back to tipc_node_create Shuang Li reported a NULL pointer de… |