CWE-476 · NULL Pointer Dereference (page 27)
Page 27 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39466 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/qcom/lmh: Check for SCM availability at probe Up until now, the necessary… |
CVE-2024-39464 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix notifier list entry init struct v4l2_async_notifier has several li… |
CVE-2024-39371 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: io_uring: check for non-NULL file pointer in io_file_can_poll() In earlier kernels, it wa… |
CVE-2024-39296 | Medium | 4.7 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix oops during rmmod "rmmod bonding" causes an oops ever since commit cc317ea3d… |
CVE-2022-48772 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver should check whether th… |
CVE-2024-37021 | Medium | 5.5 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: fpga: manager: add owner module and take its refcount The current implementation of the f… |
CVE-2024-36479 | Medium | 5.5 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: fpga: bridge: add owner module and take its refcount The current implementation of the fp… |
CVE-2024-35247 | Medium | 5.5 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current implementation of the fp… |
CVE-2024-34030 | Medium | 4.7 | 2024-06-24 | In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocation failure Return -ENOMEM from of_pci_… |
CVE-2024-38637 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of get_channel_from_mode If channel for the given node is n… |
CVE-2024-38633 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uart_driver_registered on driver removal The removal of the last… |
CVE-2024-38625 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is called. |
CVE-2024-38622 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check before its call In dpu_core_irq_callback… |
CVE-2024-38390 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails Calling a6xx_destro… |
CVE-2024-36489 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is miss… |
CVE-2024-36478 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' Writing… |
CVE-2024-36281 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules rx_create no… |
CVE-2024-36270 | Medium | 5.5 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general… |
CVE-2023-52883 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible null pointer dereference abo->tbo.resource may be NULL in amdgpu… |
CVE-2022-48770 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() task_pt_regs() can retu… |
CVE-2022-48762 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: extable: fix load_unaligned_zeropad() reg indices In ex_handler_load_unaligned_zer… |
CVE-2022-48756 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable The function performs a check… |
CVE-2022-48751 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smc_setso… |
CVE-2022-48750 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix crash in clear_caseopen Paweł Marciniak reports the following crash… |
CVE-2022-48749 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc The function performs a check… |
CVE-2022-48746 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix handling of wrong devices during bond netevent Current implementation of b… |
CVE-2022-48741 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix NULL pointer dereference in copy up warning This patch is fixing a NULL pointer… |
CVE-2022-48735 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created… |
CVE-2022-48728 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1_ipoib_setup_rn() can lead to t… |
CVE-2022-48718 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereference the NULL point… |
CVE-2022-48713 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf-… |
CVE-2021-47619 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP When XDP was configured on a system with large numbe… |
CVE-2021-47618 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9170/1: fix panic when kasan and kprobe are enabled arm32 uses software to simulate… |
CVE-2021-47612 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfc_genl_dump_devices_done When kmalloc in nfc_genl_dump_devices() f… |
CVE-2021-47610 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null ptr access msm_ioctl_gem_submit() Fix the below null pointer dereferenc… |
CVE-2021-47601 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an IS_ERR() vs NULL bug The __get_free_pages() function does not return… |
CVE-2021-47594 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: never allow the PM to close a listener subflow Currently, when deleting an endpoin… |
CVE-2021-47593 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: clear 'kern' flag from fallback sockets The mptcp ULP extension relies on sk->sk_s… |
CVE-2021-47592 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix tc flower deletion for VLAN priority Rx steering To replicate the issue… |
CVE-2021-47591 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be used for mptcp beca… |
CVE-2021-47578 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Don't call kcalloc() if size arg is zero If the size arg to kcalloc() i… |
CVE-2024-38615 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be cal… |
CVE-2024-38612 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in cas… |
CVE-2024-38609 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: check for null before dereferencing The wcid can be NULL. It should b… |
CVE-2024-38608 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5e_suspend cleans resources only if netif_device_p… |
CVE-2024-38605 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b ("ALS… |
CVE-2024-38584 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe() In the prueth_probe… |
CVE-2024-38575 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_downl… |
CVE-2024-38574 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Prevent null-pointer dereference when prog to load has no BTF In bpf_objec_load_p… |
CVE-2024-38573 | High | 7.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc… |
CVE-2024-38571 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference compute_intercept_slope() is called f… |
CVE-2024-38559 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized… |
CVE-2024-38551 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Assign dummy when codec not specified for a DAI link MediaTek sound card… |
CVE-2024-38550 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: kirkwood: Fix potential NULL dereference In kirkwood_dma_hw_params() mv_mbus_dram_i… |
CVE-2024-38548 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdns_mhdp_atomic_ena… |
CVE-2024-38547 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries The alloca… |
CVE-2024-38546 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address()… |
CVE-2024-38543 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure The kcalloc() in dmirror_… |
CVE-2024-6063 | Low | 3.3 | 2024-06-17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the fi… |
CVE-2024-6062 | Low | 3.3 | 2024-06-17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swf_svg_add_iso_sample… |
CVE-2024-37890 | High | 7.5 | 2024-06-17 | ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to… |
CVE-2024-0086 | Medium | 5.5 | 2024-06-13 | NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lea… |
CVE-2024-30285 | Medium | 5.5 | 2024-06-13 | Audition versions 24.2, 23.6.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service condi… |
CVE-2024-36972 | High | 7.8 | 2024-06-10 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. Billy Jheng Bing-Jhong… |
CVE-2024-24194 | High | 7.5 | 2024-06-06 | robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c. |
CVE-2024-22525 | Medium | 5.5 | 2024-06-06 | dnspod-sr 0dfbd37 contains a SEGV. |
CVE-2024-22524 | Medium | 5.5 | 2024-06-06 | dnspod-sr 0dfbd37 is vulnerable to buffer overflow. |
CVE-2024-21478 | Medium | 6.2 | 2024-06-03 | transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA. |
CVE-2024-31030 | Critical | 9.1 | 2024-05-31 | An issue in coap_msg.c in Keith Cullen's FreeCoAP v.0.7 allows remote attackers to cause a Denial of Service or potentially disclose information via a speciall… |
CVE-2024-36953 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr()… |
CVE-2024-36941 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a… |
CVE-2024-36938 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue Fix NULL pointer… |
CVE-2024-36937 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: xdp: use flags field to disambiguate broadcast redirect When redirecting a packet using X… |
CVE-2024-36930 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: spi: fix null pointer dereference within spi_sync If spi_sync() is called with the non-em… |
CVE-2024-36929 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not… |
CVE-2024-36928 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set… |
CVE-2024-36926 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR bo… |
CVE-2024-36925 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y Using restricted DMA… |
CVE-2024-36902 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to… |
CVE-2024-36901 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance tha… |
CVE-2024-36897 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 New request from KMD/VBIOS in… |
CVE-2024-36896 | Critical | 9.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkall… |
CVE-2024-36893 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Check for port partner validity before consuming it typec_register_part… |
CVE-2024-36892 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid zeroing outside-object freepointer for single free Commit 284f17ac13fe ("m… |
CVE-2024-36891 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix mas_empty_area_rev() null pointer dereference Currently the code calls ma… |
CVE-2024-36888 | Medium | 6.2 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix selection of wake_cpu in kick_pool() With cpu_possible_mask=0-63 and cpu_o… |
CVE-2024-36884 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault() This was missed becau… |
CVE-2024-36023 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Julia Lawall reported this null pointer dereference, this should fix it. |
CVE-2024-35492 | High | 7.5 | 2024-05-29 | Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to… |
CVE-2024-35200 | Medium | 5.3 | 2024-05-29 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate. |
CVE-2024-36014 | Medium | 5.5 | 2024-05-29 | In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new… |
CVE-2024-35618 | High | 7.5 | 2024-05-24 | PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer. |
CVE-2021-47572 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an… |
CVE-2021-47565 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's s… |
CVE-2021-47562 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix vsi->txq_map sizing The approach of having XDP queue per CPU regardless of user'… |
CVE-2021-47560 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events g… |
CVE-2021-47559 | High | 7.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() Coverity reports a possibl… |
CVE-2021-47557 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't peek at classes beyond 'nbands' when the number of DRR classes… |
CVE-2021-47556 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() ethtool_set_coalesce()… |
CVE-2021-47552 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() For avoi… |