CWE-476 · NULL Pointer Dereference (page 19)
Page 19 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-22086 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow When cur_qp isn't NULL, in order to avo… |
CVE-2025-22084 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1_uart_probe() function calls w1_uart_serd… |
CVE-2025-22070 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posi… |
CVE-2025-22066 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imx_card_probe() devm_kasprintf() returns NULL when mem… |
CVE-2025-22065 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix adapter NULL pointer dereference on reboot With SRIOV enabled, idpf ends up cal… |
CVE-2025-22063 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When calling netlb… |
CVE-2025-22062 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() We must serialize calls to sctp_udp… |
CVE-2025-22054 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL when memory a… |
CVE-2025-22052 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in ni_usb If the usb dongle is disconnected subs… |
CVE-2025-22051 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in agilent usb If the agilent usb dongle is disc… |
CVE-2025-22050 | Medium | 4.7 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical Path. The u… |
CVE-2025-22037 | High | 7.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb… |
CVE-2025-22033 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in do_compat_alignment_fixup() do_alignment_t32_to_handler() only… |
CVE-2025-22032 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference Address a kernel pan… |
CVE-2025-22031 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion When BIOS neglects to a… |
CVE-2025-22027 | Medium | 4.7 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has re… |
CVE-2025-22018 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: atm: Fix NULL pointer dereference When MPOA_cache_impos_rcvd() receives the msg, it can t… |
CVE-2025-32912 | Medium | 6.5 | 2025-04-14 | A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash. |
CVE-2025-32910 | Medium | 6.5 | 2025-04-14 | A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to cras… |
CVE-2025-32909 | Medium | 5.3 | 2025-04-14 | A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsou… |
CVE-2025-32913 | High | 7.5 | 2025-04-14 | A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a… |
CVE-2025-0121 | | 2025-04-11 | A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the… | |
CVE-2025-30645 | High | 7.5 | 2025-04-09 | A NULL Pointer Dereference vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker causing specific, valid contr… |
CVE-2025-30301 | Medium | 5.5 | 2025-04-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-ser… |
CVE-2025-30300 | Medium | 5.5 | 2025-04-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-ser… |
CVE-2025-27185 | Medium | 5.5 | 2025-04-08 | After Effects versions 25.1, 24.6.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service… |
CVE-2025-30671 | Medium | 6.5 | 2025-04-08 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-30670 | Medium | 6.5 | 2025-04-08 | Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. |
CVE-2025-22017 | Medium | 5.5 | 2025-04-08 | In the Linux kernel, the following vulnerability has been resolved: devlink: fix xa_alloc_cyclic() error handling In case of returning 1 from xa_alloc_cyclic… |
CVE-2025-22016 | Medium | 5.5 | 2025-04-08 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix xa_alloc_cyclic() error handling In case of returning 1 from xa_alloc_cyclic()… |
CVE-2025-22015 | High | 7.8 | 2025-04-08 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page… |
CVE-2025-22009 | Medium | 5.5 | 2025-04-08 | In the Linux kernel, the following vulnerability has been resolved: regulator: dummy: force synchronous probing Sometimes I get a NULL pointer dereference at… |
CVE-2025-30195 | High | 7.5 | 2025-04-07 | An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses a… |
CVE-2025-31115 | | 2025-04-03 | XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma… | |
CVE-2025-22007 | Medium | 5.5 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix error code in chan_alloc_skb_cb() The chan_alloc_skb_cb() function is supp… |
CVE-2025-22006 | Medium | 5.5 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence Registering the interrupts f… |
CVE-2025-22002 | Medium | 5.5 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: netfs: Call `invalidate_cache` only if implemented Many filesystems such as NFS and Ceph… |
CVE-2025-21998 | Medium | 4.7 | 2025-04-03 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: fix efivars registration race Since the conversion to using t… |
CVE-2025-3122 | Low | 3.1 | 2025-04-02 | A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctio… |
CVE-2025-21990 | Medium | 5.5 | 2025-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may no… |
CVE-2025-21989 | Medium | 5.5 | 2025-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix missing .is_two_pixels_per_container Starting from 6.11, AMDGPU driv… |
CVE-2025-21982 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kasprintf() calls can r… |
CVE-2025-21980 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in… |
CVE-2025-21975 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() In mlx5_chains_create_table(), the… |
CVE-2025-21970 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from b… |
CVE-2025-21965 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() If a BPF scheduler provides an i… |
CVE-2025-21957 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception… |
CVE-2025-21953 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: mana: cleanup mana struct after debugfs_remove() When on a MANA VM hibernation is tr… |
CVE-2025-21948 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL… |
CVE-2025-21941 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params… |
CVE-2025-21940 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL Pointer Dereference in KFD queue Through KFD IOCTL Fuzzing we encoun… |
CVE-2025-21939 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hmm: Don't dereference struct page pointers without notifier lock The pnfs that we… |
CVE-2025-21937 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() Add check for the return… |
CVE-2025-21936 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() Add check for the re… |
CVE-2025-21933 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When update_mmu_cache_range() is called… |
CVE-2025-21921 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device ethnl_req_get_phydev(… |
CVE-2025-21918 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all thr… |
CVE-2025-21917 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Flush the notify_hotplug_work When performing continuous unbind/bind… |
CVE-2025-21904 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: caif_virtio: fix wrong pointer check in cfv_probe() del_vqs() frees virtqueues, therefore… |
CVE-2025-21901 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add sanity checks on rdev validity There is a possibility that ulp_irq_stop… |
CVE-2025-21899 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting named_triggers list The following commands causes a… |
CVE-2025-3010 | Low | 3.3 | 2025-03-31 | A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TIntermed… |
CVE-2025-2960 | Medium | 6.5 | 2025-03-30 | A vulnerability classified as problematic has been found in TRENDnet TEW-637AP and TEW-638APB 1.2.7/1.3.0.106. This affects the function sub_41DED0 of the file… |
CVE-2025-2959 | Medium | 6.5 | 2025-03-30 | A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/… |
CVE-2025-2957 | Medium | 6.5 | 2025-03-30 | A vulnerability was found in TRENDnet TEW-411BRP+ 2.07. It has been classified as problematic. Affected is the function sub_401DB0 of the file /usr/sbin/httpd… |
CVE-2025-2956 | Medium | 6.5 | 2025-03-30 | A vulnerability was found in TRENDnet TI-G102i 1.0.7.S0_ /1.0.8.S0_ and classified as problematic. This issue affects the function plugins_call_handle_uri_raw… |
CVE-2025-2926 | Low | 3.3 | 2025-03-28 | A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache… |
CVE-2025-31163 | Medium | 6.6 | 2025-03-28 | Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function. |
CVE-2024-48615 | High | 7.5 | 2025-03-28 | Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_form… |
CVE-2023-53015 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopff_init() only checks the total sum of the… |
CVE-2023-53011 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: enable all safety features by default In the original implementation of dwma… |
CVE-2023-53005 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' Function 'create_his… |
CVE-2023-52994 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: acpi: Fix suspend with Xen PV Commit f1e525009493 ("x86/boot: Skip realmode init code whe… |
CVE-2023-52993 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggeri… |
CVE-2023-52991 | High | 7.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer in skb_segment_list Commit 3a1296a38d0c ("net: Support GRO/GSO frag… |
CVE-2023-52984 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices The probe() functio… |
CVE-2023-52976 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efi_mem_reserve_persistent When iterating on a linked li… |
CVE-2023-52939 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() As commit 183652… |
CVE-2023-52938 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null… |
CVE-2022-49758 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resou… |
CVE-2022-49756 | Medium | 5.5 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() sp_usb_phy_probe()… |
CVE-2025-31181 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31180 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31179 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash. |
CVE-2025-31178 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31176 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash. |
CVE-2024-58091 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/O DMA areas are not necessarily backed… |
CVE-2025-21870 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DAI copier w… |
CVE-2024-11499 | Medium | 4.9 | 2025-03-25 | A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restar… |
CVE-2024-10037 | Medium | 4.4 | 2025-03-25 | A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU application if a specially crafted message seque… |
CVE-2025-2588 | Low | 3.3 | 2025-03-21 | A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/… |
CVE-2025-0312 | High | 7.5 | 2025-03-20 | A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama… |
CVE-2025-2487 | Medium | 4.9 | 2025-03-18 | A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return… |
CVE-2025-21864 | High | 7.8 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hitting the W… |
CVE-2025-21857 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix error handling causing NULL dereference tcf_exts_miss_cookie_base… |
CVE-2025-21854 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: sockmap, vsock: For connectible sockets allow only connected sockmap expects all vsocks t… |
CVE-2025-21852 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: net: Add rx_skb of kfree_skb to raw_tp_null_args[]. Yan Zhai reported a BPF prog could tr… |
CVE-2025-21848 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_ap… |
CVE-2025-21847 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() The nullity of sps… |
CVE-2025-21846 | Medium | 5.5 | 2025-03-12 | In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it was reported that the acct(2) system ca… |