CWE-476 · NULL Pointer Dereference (page 21)
Page 21 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49476 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel crash at mt7921_pci_remove The crash log shown it is possible th… |
CVE-2022-49475 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() It wil… |
CVE-2022-49472 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Allow probing without .driver_data Currently, if the .probe element is… |
CVE-2022-49459 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe platform_get… |
CVE-2022-49453 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc The allocation funciton… |
CVE-2022-49450 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix listen() setting the bar too high for the prealloc rings AF_RXRPC's listen() h… |
CVE-2022-49449 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() It will cau… |
CVE-2022-49448 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: soc: bcm: Check for NULL return of devm_kzalloc() As the potential failure of allocation… |
CVE-2022-49445 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() It will cau… |
CVE-2022-49435 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() It will cause nul… |
CVE-2022-49429 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent panic when SDMA is disabled If the hfi1 module is loaded with HFI1_CAP… |
CVE-2022-49428 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on inline_dots inode As Wenqing reported in bugzilla: https… |
CVE-2022-49425 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable w… |
CVE-2022-49424 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer dereference when printing dev_name When larbdev is NULL… |
CVE-2022-49423 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rtla: Avoid record NULL pointer dereference Fix the following null/deref_null.cocci error… |
CVE-2022-49417 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mei: fix potential NULL-ptr deref If SKB allocation fails, continue rather than… |
CVE-2022-49400 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: md: Don't set mddev private to NULL in raid0 pers->free In normal stop process, it does l… |
CVE-2022-49392 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe platform_… |
CVE-2022-49376 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix potential NULL pointer dereference If sd_probe() sees an early error before… |
CVE-2022-49375 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rtc: mt6397: check return value after calling platform_get_resource() It will cause null-… |
CVE-2022-49353 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: powerpc/papr_scm: don't requests stats with '0' sized stats buffer Sachin reported [1] th… |
CVE-2022-49335 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. Submitting a cs with 0 chun… |
CVE-2022-49332 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Address NULL pointer dereference after starget_to_rport() Calls to starget_to… |
CVE-2022-49329 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: vduse: Fix NULL pointer dereference on sysfs access The control device has no drvdata. So… |
CVE-2022-49323 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() It will cause null… |
CVE-2022-49321 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: treat all calls not a bcall when bc_serv is NULL When a rdma server returns a f… |
CVE-2022-49319 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: check return value after calling platform_get_resource() It will cause… |
CVE-2022-49307 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() When the driver fails at a… |
CVE-2022-49302 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: USB: host: isp116x: check return value after calling platform_get_resource() It will caus… |
CVE-2022-49300 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between nbd_alloc_config() and module removal When nbd module is being remo… |
CVE-2022-49295 | High | 7.0 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: nbd: call genl_unregister_family() first in nbd_cleanup() Otherwise there may be race bet… |
CVE-2022-49286 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tpm: use try_get_ops() in tpm-space.c As part of the series conversion to remove nested T… |
CVE-2022-49285 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: use the correct logic to get mma8452_data The original logic to get… |
CVE-2022-49282 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix loop condition at f2fs_quota_sync() cnt should be passed to sb_has_quota… |
CVE-2022-49273 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: fix rtc features null pointer dereference When there is no interrupt line, rt… |
CVE-2022-49271 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cifs: prevent bad output lengths in smb2_ioctl_query_info() When calling smb2_ioctl_query… |
CVE-2022-49268 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Do not call snd_dma_free_pages() w… |
CVE-2022-49264 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting[1] Ariadne Conill: "In severa… |
CVE-2022-49262 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 - remove CONFIG_DM_CRYPT check No issues were found while using the dri… |
CVE-2022-49257 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix NULL dereference in error cleanup In watch_queue_set_size(), the error c… |
CVE-2022-49254 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() In cal_… |
CVE-2022-49232 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() … |
CVE-2022-49228 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a btf decl_tag bug when tagging a function syzbot reported a btf decl_tag bug wi… |
CVE-2022-49221 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dp_panel DP CTS test case 4.2.2.6 has valid edid… |
CVE-2022-49215 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race at socket teardown Fix a race in the xsk socket teardown code that can lead… |
CVE-2022-49214 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Don't use DSISR for SLB faults Since commit 46ddcb3950a2 ("powerpc/mm: Show… |
CVE-2022-49202 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: add missing NULL check in h5_enqueue Syzbot hit general protection f… |
CVE-2022-49201 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fix race between xmit and reset There is a race between reset and the transmit p… |
CVE-2022-49195 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix panic on shutdown if multi-chip tree failed to probe DSA probing is atypica… |
CVE-2022-49187 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: clk: Fix clk_hw_get_clk() when dev is NULL Any registered clk_core structure can have a N… |
CVE-2022-49184 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: switchdev: fix possible NULL pointer dereference As the possible failure of… |
CVE-2022-49177 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: hwrng: cavium - fix NULL but dereferenced coccicheck error Fix following coccicheck warni… |
CVE-2022-49165 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers If the applicati… |
CVE-2022-49159 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement ref count for SRB The timeout handler and the done function are… |
CVE-2022-49152 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xas_create_range() when multi-order entry present If there is already an entr… |
CVE-2022-49141 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: fix possible NULL pointer dereference As the possible failure of the all… |
CVE-2022-49139 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified… |
CVE-2022-49138 | High | 8.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Ignore multiple conn complete events When one of the three connecti… |
CVE-2022-49134 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Guard against invalid local ports When processing events generated by th… |
CVE-2022-49130 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ath11k: mhi: use mhi_sync_power_up() If amss.bin was missing ath11k would crash during 'r… |
CVE-2022-49125 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/sprd: fix potential NULL dereference 'drm' could be null in sprd_drm_shutdown, and dr… |
CVE-2022-49106 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances vchiq_get_state… |
CVE-2022-49104 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_core: handle NULL result of find_service_by_handle In case of an invalid h… |
CVE-2022-49096 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed… |
CVE-2022-49090 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: arch/arm64: Fix topology initialization for core scheduling Arm64 systems rely on store_c… |
CVE-2022-49084 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qede_build_skb() assumes build_skb() always w… |
CVE-2022-49083 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/omap: Fix regression in probe for NULL pointer dereference Commit 3f6634d997db ("io… |
CVE-2022-49072 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: gpio: Restrict usage of GPIO chip irq members before initialization GPIO chip irq members… |
CVE-2022-49071 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: ili9341: fix optional regulator handling If the optional regulator lookup fail… |
CVE-2022-49070 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix unregistering of framebuffers without device OF framebuffers do not have an un… |
CVE-2022-49065 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix the svc_deferred_event trace class Fix a NULL deref crash that occurs when an… |
CVE-2022-49061 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link When using a fix… |
CVE-2022-49060 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() dev_name() was called with de… |
CVE-2022-49055 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmalloc_array() As the kmalloc_array() may… |
CVE-2022-49046 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: i2c: dev: check return value when calling dev_set_name() If dev_set_name() fails, the dev… |
CVE-2021-47657 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() If virtio_gpu_obj… |
CVE-2021-47652 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() I got a null-ptr-deref repor… |
CVE-2021-47651 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devm_kcalloc Because of the possible failure o… |
CVE-2021-47650 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There is one call trace t… |
CVE-2021-47647 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E clock related kernel oops that are cau… |
CVE-2021-47645 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com O… |
CVE-2021-47631 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there… |
CVE-2024-53877 | Low | 3.3 | 2025-02-25 | NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause a NULL pointer exception by passing a malformed… |
CVE-2025-1632 | Low | 3.3 | 2025-02-24 | A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipula… |
CVE-2025-1470 | Medium | 5.5 | 2025-02-21 | In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check thei… |
CVE-2025-27113 | Low | 2.9 | 2025-02-18 | libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. |
CVE-2025-25475 | High | 7.5 | 2025-02-18 | A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM fi… |
CVE-2025-25473 | Medium | 5.3 | 2025-02-18 | FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c. |
CVE-2025-25471 | Medium | 4.3 | 2025-02-18 | FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c. |
CVE-2025-22921 | Medium | 6.5 | 2025-02-18 | FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c. |
CVE-2024-50609 | High | 7.5 | 2025-02-18 | An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP address and port, one can send a packet with… |
CVE-2024-50608 | High | 7.5 | 2025-02-18 | An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a p… |
CVE-2025-1373 | Low | 3.3 | 2025-02-17 | A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov_read_trak of the file libavformat/m… |
CVE-2025-1371 | Low | 3.3 | 2025-02-17 | A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file r… |
CVE-2024-37602 | Medium | 4.6 | 2025-02-13 | An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function aff… |
CVE-2023-34400 | High | 7.5 | 2025-02-13 | Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the… |
CVE-2023-34398 | High | 7.5 | 2025-02-13 | Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost… |
CVE-2024-46922 | High | 7.5 | 2025-02-12 | An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in t… |
CVE-2024-39356 | High | 7.4 | 2025-02-12 | NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user t… |
CVE-2024-32941 | High | 7.9 | 2025-02-12 | NULL pointer dereference for some Intel(R) MLC software before version v3.11b may allow an authenticated user to potentially enable denial of service via local… |