CWE-476 · NULL Pointer Dereference (page 29)
Page 29 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48718 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereference the NULL point… |
CVE-2022-48713 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf-… |
CVE-2021-47619 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP When XDP was configured on a system with large numbe… |
CVE-2021-47618 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9170/1: fix panic when kasan and kprobe are enabled arm32 uses software to simulate… |
CVE-2021-47612 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfc_genl_dump_devices_done When kmalloc in nfc_genl_dump_devices() f… |
CVE-2021-47610 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null ptr access msm_ioctl_gem_submit() Fix the below null pointer dereferenc… |
CVE-2021-47601 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an IS_ERR() vs NULL bug The __get_free_pages() function does not return… |
CVE-2021-47594 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: never allow the PM to close a listener subflow Currently, when deleting an endpoin… |
CVE-2021-47593 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: clear 'kern' flag from fallback sockets The mptcp ULP extension relies on sk->sk_s… |
CVE-2021-47592 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix tc flower deletion for VLAN priority Rx steering To replicate the issue… |
CVE-2021-47591 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be used for mptcp beca… |
CVE-2021-47578 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Don't call kcalloc() if size arg is zero If the size arg to kcalloc() i… |
CVE-2024-38615 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be cal… |
CVE-2024-38612 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in cas… |
CVE-2024-38609 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: check for null before dereferencing The wcid can be NULL. It should b… |
CVE-2024-38608 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5e_suspend cleans resources only if netif_device_p… |
CVE-2024-38605 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b ("ALS… |
CVE-2024-38584 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe() In the prueth_probe… |
CVE-2024-38575 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_downl… |
CVE-2024-38574 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Prevent null-pointer dereference when prog to load has no BTF In bpf_objec_load_p… |
CVE-2024-38573 | High | 7.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc… |
CVE-2024-38571 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference compute_intercept_slope() is called f… |
CVE-2024-38559 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized… |
CVE-2024-38551 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Assign dummy when codec not specified for a DAI link MediaTek sound card… |
CVE-2024-38550 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: kirkwood: Fix potential NULL dereference In kirkwood_dma_hw_params() mv_mbus_dram_i… |
CVE-2024-38548 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdns_mhdp_atomic_ena… |
CVE-2024-38547 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries The alloca… |
CVE-2024-38546 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address()… |
CVE-2024-38543 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure The kcalloc() in dmirror_… |
CVE-2024-6063 | Low | 3.3 | 2024-06-17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the fi… |
CVE-2024-6062 | Low | 3.3 | 2024-06-17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swf_svg_add_iso_sample… |
CVE-2024-37890 | High | 7.5 | 2024-06-17 | ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to… |
CVE-2024-0086 | Medium | 5.5 | 2024-06-13 | NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lea… |
CVE-2024-30285 | Medium | 5.5 | 2024-06-13 | Audition versions 24.2, 23.6.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service condi… |
CVE-2024-36972 | High | 7.8 | 2024-06-10 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. Billy Jheng Bing-Jhong… |
CVE-2024-24194 | High | 7.5 | 2024-06-06 | robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c. |
CVE-2024-22525 | Medium | 5.5 | 2024-06-06 | dnspod-sr 0dfbd37 contains a SEGV. |
CVE-2024-22524 | Medium | 5.5 | 2024-06-06 | dnspod-sr 0dfbd37 is vulnerable to buffer overflow. |
CVE-2024-21478 | Medium | 6.2 | 2024-06-03 | transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA. |
CVE-2024-31030 | Critical | 9.1 | 2024-05-31 | An issue in coap_msg.c in Keith Cullen's FreeCoAP v.0.7 allows remote attackers to cause a Denial of Service or potentially disclose information via a speciall… |
CVE-2024-36953 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr()… |
CVE-2024-36941 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a… |
CVE-2024-36938 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue Fix NULL pointer… |
CVE-2024-36937 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: xdp: use flags field to disambiguate broadcast redirect When redirecting a packet using X… |
CVE-2024-36930 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: spi: fix null pointer dereference within spi_sync If spi_sync() is called with the non-em… |
CVE-2024-36929 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not… |
CVE-2024-36928 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid Symptom: When the hsuid attribute is set… |
CVE-2024-36926 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR bo… |
CVE-2024-36925 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y Using restricted DMA… |
CVE-2024-36902 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to… |
CVE-2024-36901 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance tha… |
CVE-2024-36897 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 New request from KMD/VBIOS in… |
CVE-2024-36896 | Critical | 9.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkall… |
CVE-2024-36893 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Check for port partner validity before consuming it typec_register_part… |
CVE-2024-36892 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid zeroing outside-object freepointer for single free Commit 284f17ac13fe ("m… |
CVE-2024-36891 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix mas_empty_area_rev() null pointer dereference Currently the code calls ma… |
CVE-2024-36888 | Medium | 6.2 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix selection of wake_cpu in kick_pool() With cpu_possible_mask=0-63 and cpu_o… |
CVE-2024-36884 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault() This was missed becau… |
CVE-2024-36023 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Julia Lawall reported this null pointer dereference, this should fix it. |
CVE-2024-35492 | High | 7.5 | 2024-05-29 | Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to… |
CVE-2024-35200 | Medium | 5.3 | 2024-05-29 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate. |
CVE-2024-36014 | Medium | 5.5 | 2024-05-29 | In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new… |
CVE-2024-35618 | High | 7.5 | 2024-05-24 | PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer. |
CVE-2021-47572 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an… |
CVE-2021-47565 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's s… |
CVE-2021-47562 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix vsi->txq_map sizing The approach of having XDP queue per CPU regardless of user'… |
CVE-2021-47560 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Protect driver from buggy firmware When processing port up/down events g… |
CVE-2021-47559 | High | 7.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() Coverity reports a possibl… |
CVE-2021-47557 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't peek at classes beyond 'nbands' when the number of DRR classes… |
CVE-2021-47556 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() ethtool_set_coalesce()… |
CVE-2021-47552 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() For avoi… |
CVE-2021-47542 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In qlcnic_… |
CVE-2021-47540 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode Fix the following NULL… |
CVE-2021-47528 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init() In cdnsp_endpoint_ini… |
CVE-2021-47526 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: Fix NULL pointer dereference in ->remove() drvdata has to be set in _pr… |
CVE-2021-47522 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: HID: bigbenff: prevent null pointer dereference When emulating the device through uhid, t… |
CVE-2021-47518 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done The done() netlink callba… |
CVE-2021-47515 | High | 7.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: seg6: fix the iif in the IPv6 socket control block When an IPv4 packet is received, the i… |
CVE-2021-47503 | Medium | 6.2 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() Calling scsi_remove_host()… |
CVE-2021-47501 | Medium | 5.5 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc When trying to dump VFs VSI RX/T… |
CVE-2024-36011 | Medium | 5.5 | 2024-05-23 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix potential null-ptr-deref Fix potential null-ptr-deref in hci_le_big_s… |
CVE-2021-47486 | High | 7.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpf_jit_binary_free() function requires a… |
CVE-2021-47484 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix possible null pointer dereference. This patch fixes possible null point… |
CVE-2021-47476 | Medium | 4.6 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB tr… |
CVE-2021-47471 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference crash on unload The mxsfb->crtc.funcs may alread… |
CVE-2021-47464 | High | 7.4 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: audit: fix possible null-pointer dereference in audit_filter_rules Fix possible null-poi… |
CVE-2021-47463 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem() Check for a NULL… |
CVE-2021-47445 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null pointer dereference on pointer edp The initialization of pointer dev de… |
CVE-2021-47440 | Low | 2.3 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: net: encx24j600: check error in devm_regmap_init_encx24j600 devm_regmap_init may return e… |
CVE-2021-47439 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work When the ksz mo… |
CVE-2021-47436 | Medium | 5.5 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 ("usb: musb: musb_dsps: req… |
CVE-2021-47435 | Medium | 4.7 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dm_io_dec_pending() calls end_io_acc… |
CVE-2023-52879 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters The following can crash the kernel: #… |
CVE-2023-52877 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that type… |
CVE-2023-52876 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data Add the check for the ret… |
CVE-2023-52875 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52873 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52870 | Medium | 4.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data Add the check for the return… |
CVE-2023-52869 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup() and re… |
CVE-2023-52865 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data Add the check for the return… |