CWE-476 · NULL Pointer Dereference (page 21)
Page 21 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-57798 | High | 7.8 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While recei… |
CVE-2024-56372 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: net: tun: fix tun_napi_alloc_frags() syzbot reported the following crash [1] Issue came… |
CVE-2024-55916 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP (or VSS) d… |
CVE-2024-48881 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: R… |
CVE-2024-48873 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR The return value of i… |
CVE-2024-47809 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkb_resource null dereference This patch fixes a possible null pointer… |
CVE-2024-46896 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't access invalid sched Since 2320c9e6a768 ("drm/sched: memset() 'job' in… |
CVE-2024-45828 | Medium | 5.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request Bus cleanup path in DMA… |
CVE-2024-56782 | Medium | 5.5 | 2025-01-08 | In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() acpi_dev_hid_match… |
CVE-2024-56774 | Medium | 5.5 | 2025-01-08 | In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_search_slot() Syzbot reports a null-ptr… |
CVE-2024-56773 | Medium | 5.5 | 2025-01-08 | In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunit_device_driver_test() kunit_kzalloc() may r… |
CVE-2024-56767 | Medium | 5.5 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset The at_xdmac_memset… |
CVE-2024-56758 | Medium | 5.5 | 2025-01-06 | In the Linux kernel, the following vulnerability has been resolved: btrfs: check folio mapping after unlock in relocate_one_folio() When we call btrfs_read_f… |
CVE-2025-0223 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x800… |
CVE-2025-0222 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the… |
CVE-2025-0221 | Medium | 5.5 | 2025-01-05 | A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the lib… |
CVE-2023-6603 | High | 7.5 | 2024-12-31 | A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null po… |
CVE-2024-56730 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: net/9p/usbg: fix handling of the failed kzalloc() memory allocation On the linux-next, ne… |
CVE-2024-56727 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c Adding error pointer check… |
CVE-2024-56726 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c Add error pointer check after ca… |
CVE-2024-56711 | Medium | 5.5 | 2024-12-29 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drm_mode_duplic… |
CVE-2024-56702 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark raw_tp arguments with PTR_MAYBE_NULL Arguments to a raw tracepoint are tagged a… |
CVE-2024-56700 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: media: wl128x: Fix atomicity violation in fmc_send_cmd() Atomicity violation occurs when… |
CVE-2024-56698 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3_request->num_queued_sgs is d… |
CVE-2024-56697 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() Fix two is… |
CVE-2024-56696 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() kunit_kzalloc() may r… |
CVE-2024-56689 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' If platform_get_resourc… |
CVE-2024-56688 | High | 7.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport Since transport->sock has been s… |
CVE-2024-56682 | Medium | 5.5 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: irqchip/riscv-aplic: Prevent crash when MSI domain is missing If the APLIC driver is prob… |
CVE-2024-56670 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointe… |
CVE-2024-56669 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cac… |
CVE-2024-56668 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain The qi_batch is allocated… |
CVE-2024-56667 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL pointer dereference in capture_engine When the intel_context structure… |
CVE-2024-56666 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Dereference null return value In the function pqm_uninit there is a call-assi… |
CVE-2024-56661 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanup_bearer() syzbot found [1] that after blamed commit, ub->u… |
CVE-2024-56660 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The dr_domain_add_vport_cap() f… |
CVE-2024-56649 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: Do not configure preemptible TCs if SIs do not support Both ENETC PF and VF d… |
CVE-2024-56646 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in modify_prefix_route() syzbot found a NULL deref [1] in… |
CVE-2024-56634 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in grgpio_probe devm_kasprintf() can return a NULL pointer o… |
CVE-2024-56629 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name maybe null pointer Due to incorrect dev->product re… |
CVE-2024-56621 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Cancel RTC work during ufshcd_remove() Currently, RTC work is only cance… |
CVE-2024-56620 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled Otherwise, it will result in… |
CVE-2024-56617 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit … |
CVE-2024-56612 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: mm/gup: handle NULL pages in unpin_user_pages() The recent addition of "pofs" (pages or f… |
CVE-2024-56611 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM We current… |
CVE-2024-56599 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: avoid NULL pointer error during sdio remove When running 'rmmod ath10k', at… |
CVE-2024-56593 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() This… |
CVE-2024-56588 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Create all dump files during debugfs initialization For the current debug… |
CVE-2024-56587 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightness_show() with led_cdev->led_access mutex There is NULL poin… |
CVE-2024-56580 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains There is a chance to… |
CVE-2024-56579 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before register video device The video drvdata should b… |
CVE-2024-56578 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Set video drvdata before register video device The video drvdata should… |
CVE-2024-56577 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix null-ptr-deref during unload module The workqueue should be destroye… |
CVE-2024-56575 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Ensure power suppliers be suspended before detach them The power supplie… |
CVE-2024-56574 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in ts2020_probe() KASAN reported a null-ptr-deref issue… |
CVE-2024-56569 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the follo… |
CVE-2024-56568 | Medium | 4.7 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference o… |
CVE-2024-56549 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object->file At present, the object->file has… |
CVE-2024-56544 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: udmabuf: change folios array from kmalloc to kvmalloc When PAGE_SIZE 4096, MAX_PAGE_ORDER… |
CVE-2024-56540 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and rec… |
CVE-2024-56537 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_disp: layer may be null while releasing layer->info can be null if we h… |
CVE-2024-56536 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: Fix potential NULL dereference A recent refactoring was identified by stati… |
CVE-2024-56535 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() kmalloc may fail… |
CVE-2024-53238 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: adjust the position to init iso data anchor MediaTek iso data anchor in… |
CVE-2024-53235 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix file-backed mounts over FUSE syzbot reported a null-ptr-deref in fuse_read_arg… |
CVE-2024-53233 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: unicode: Fix utf8_load() error path utf8_load() requests the symbol "utf8_data_table" and… |
CVE-2024-53232 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a P… |
CVE-2024-53231 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() cpufreq_cpu_get_raw(… |
CVE-2024-53230 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() cpufreq_cpu_get_raw()… |
CVE-2024-53226 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() ib_map_mr_sg() allows ULPs… |
CVE-2024-53224 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Move events notifier registration to be after device registration Move pkey ch… |
CVE-2024-53222 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in comp_algorithm_show() LTP reported a NULL pointer dereference a… |
CVE-2024-53221 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null-ptr-deref in f2fs_submit_page_bio() There's issue as follows when concurre… |
CVE-2024-53217 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() @ses is initialized to NULL… |
CVE-2024-53209 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix receive ring space parameters when XDP is active The MTU setting at the time… |
CVE-2024-53205 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe In rtk_usb2phy_probe() devm_kzallo… |
CVE-2024-53204 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe In rtk_usb3phy_probe() devm_kzallo… |
CVE-2024-53201 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe This comm… |
CVE-2024-53200 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp This commit a… |
CVE-2024-53199 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-audmix: Add NULL check in imx_audmix_probe devm_kasprintf() can return a NULL p… |
CVE-2024-53188 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix crash when unbinding If there is an error during some initialization re… |
CVE-2024-53185 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix NULL ptr deref in crypto_aead_setkey() Neither SMB3.0 or SMB3.02 support… |
CVE-2024-53180 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the default mmap fault handler A driver might allow… |
CVE-2024-53167 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfs/blocklayout: Don't attempt unregister for invalid block device Since commit d869da91c… |
CVE-2020-9085 | Medium | 5.3 | 2024-12-27 | There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due t… |
CVE-2024-56430 | Low | 2.9 | 2024-12-25 | OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp. |
CVE-2024-53157 | Medium | 5.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash… |
CVE-2024-53154 | Medium | 5.5 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applnco_probe Add NULL check in applnco_probe, to h… |
CVE-2024-41884 | | 2024-12-24 | Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. If an attacker does not enter any value for a specific… | |
CVE-2024-41883 | | 2024-12-24 | Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR . An attacker enters a special value for a specific… | |
CVE-2023-21586 | Medium | 5.5 | 2024-12-19 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference… |
CVE-2024-56318 | High | 7.5 | 2024-12-18 | In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMes… |
CVE-2024-53580 | High | 7.5 | 2024-12-18 | iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function. |
CVE-2022-40733 | Medium | 5.0 | 2024-12-18 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 2200… |
CVE-2022-40732 | Medium | 5.0 | 2024-12-18 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 2200… |
CVE-2024-53270 | High | 7.5 | 2024-12-18 | Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when… |
CVE-2024-37605 | Medium | 6.5 | 2024-12-17 | A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. |
CVE-2024-36832 | High | 7.5 | 2024-12-17 | A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authenti… |
CVE-2024-36831 | Medium | 5.3 | 2024-12-17 | A NULL pointer dereference in the plugins_call_handle_uri_clean function of D-Link DAP-1520 REVA_FIRMWARE_1.10B04_BETA02_HOTFIX allows attackers to cause a Den… |
CVE-2024-12662 | Medium | 5.5 | 2024-12-16 | A vulnerability classified as problematic has been found in IObit Advanced SystemCare Utimate up to 17.0.0. This affects the function 0x8001E040 in the library… |