CWE-476 · NULL Pointer Dereference (page 30)
Page 30 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48648 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix null pointer dereference in efx_hard_start_xmit Trying to get the channel from t… |
CVE-2022-48647 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix TX channel offset when using legacy interrupts In legacy interrupt mode the tx_c… |
CVE-2022-48646 | Medium | 6.2 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efx_hard_start_xmit Like in previous patch for… |
CVE-2022-48644 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In an incredibly str… |
CVE-2022-48640 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix NULL deref in bond_rr_gen_slave_id Fix a NULL dereference of the struct bond… |
CVE-2022-48636 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup Fix Oops in dasd_… |
CVE-2023-52646 | Medium | 5.5 | 2024-04-26 | In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 ("aio: Make it possible to rema… |
CVE-2024-31755 | High | 7.6 | 2024-04-26 | cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c. |
CVE-2024-26924 | High | 7.8 | 2024-04-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element Pablo reports a crash with large batc… |
CVE-2024-32661 | High | 7.5 | 2024-04-23 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to a possible `NULL` access and cr… |
CVE-2023-48183 | High | 7.5 | 2024-04-23 | QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval. |
CVE-2024-1241 | Medium | 5.5 | 2024-04-23 | Watchdog Antivirus v1.6.415 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002014 IOCTL code of the wsdk-driver.sys driver. |
CVE-2023-49275 | Medium | 6.5 | 2024-04-19 | Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during fuzzing of the ana… |
CVE-2024-27978 | Medium | 6.5 | 2024-04-19 | A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform de… |
CVE-2024-24991 | Medium | 6.5 | 2024-04-19 | A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform de… |
CVE-2024-31041 | High | 7.5 | 2024-04-17 | Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to cause a denial of service. |
CVE-2024-26903 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security During our fuzz testing of… |
CVE-2024-26902 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler (1 << idx) of int is not desired when sett… |
CVE-2024-26881 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is received on HIP08 devices The HIP08 devices does… |
CVE-2024-26880 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: dm: call the resume method on internal suspend There is this reported crash when experime… |
CVE-2024-26879 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axg_clk_regmaps Some clocks were missing from axg_clk_r… |
CVE-2024-26878 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereferen… |
CVE-2024-26874 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip It's possible tha… |
CVE-2024-26871 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix NULL pointer dereference in f2fs_submit_page_write() BUG: kernel NULL pointer d… |
CVE-2024-26868 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails We've been seeing the following pan… |
CVE-2024-26867 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_8255: Correct error in subdevice initialization The refactoring done in co… |
CVE-2024-26858 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after po… |
CVE-2024-26855 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice… |
CVE-2024-26854 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: ice: fix uninitialized dplls mutex usage The pf->dplls.lock mutex is initialized too late… |
CVE-2024-24856 | Medium | 5.3 | 2024-04-17 | The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that… |
CVE-2023-51391 | High | 7.5 | 2024-04-16 | A bug in Micrium OS Network HTTP Server permits an invalid pointer dereference during header processing - potentially allowing a device crash and Denial of Ser… |
CVE-2022-24810 | Medium | 6.5 | 2024-04-16 | net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malfor… |
CVE-2022-24809 | Medium | 6.5 | 2024-04-16 | net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malform… |
CVE-2022-24808 | Medium | 6.5 | 2024-04-16 | net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malfor… |
CVE-2024-3858 | High | 7.5 | 2024-04-16 | It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125. |
CVE-2024-30403 | Medium | 6.5 | 2024-04-12 | A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacke… |
CVE-2024-28458 | High | 7.5 | 2024-04-11 | Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/ac… |
CVE-2024-20794 | Medium | 5.5 | 2024-04-11 | Animate versions 23.0.4, 24.0.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service. An at… |
CVE-2021-47218 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix NULL-pointer dereference when hashtab allocation fails When the hash table s… |
CVE-2021-47217 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails Check for a va… |
CVE-2021-47211 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc The pointer cs_desc retu… |
CVE-2021-47207 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: fix null pointer dereference on pointer block The pointer block return from sn… |
CVE-2021-47206 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platform_get_resource() It will ca… |
CVE-2021-47202 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: thermal: Fix NULL pointer dereferences in of_thermal_ functions of_parse_thermal_zones()… |
CVE-2021-47186 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: tipc: check for null after calling kmemdup kmemdup can return a null pointer so need to c… |
CVE-2021-47184 | High | 8.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL ptr dereference on VSI filter sync Remove the reason of null pointer deref… |
CVE-2021-47183 | High | 8.8 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix link down processing to address NULL pointer dereference If an FC link do… |
CVE-2021-47181 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: usb: musb: tusb6010: check return value after calling platform_get_resource() It will cau… |
CVE-2024-3385 | High | 7.5 | 2024-04-10 | A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually c… |
CVE-2024-23083 | Medium | 5.3 | 2024-04-10 | Time4J Base v5.9.3 was discovered to contain a NullPointerException via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodel(Locale). NOTE… |
CVE-2024-23080 | Critical | 9.1 | 2024-04-10 | Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disput… |
CVE-2024-23076 | High | 7.5 | 2024-04-10 | JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator.java. NOTE: this is disputed by multipl… |
CVE-2024-26219 | High | 7.5 | 2024-04-09 | HTTP.sys Denial of Service Vulnerability |
CVE-2024-26183 | Medium | 6.5 | 2024-04-09 | Windows Kerberos Denial of Service Vulnerability |
CVE-2024-26277 | Low | 3.3 | 2024-04-09 | A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207… |
CVE-2024-23081 | Low | 3.3 | 2024-04-08 | ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareTo(ChronoLocalDate). NOTE: this i… |
CVE-2024-23085 | High | 7.5 | 2024-04-08 | Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double[], int, int[]). NOTE: t… |
CVE-2024-23078 | Critical | 9.1 | 2024-04-08 | JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double)… |
CVE-2023-52344 | Medium | 5.3 | 2024-04-08 | In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional ex… |
CVE-2024-29751 | Medium | 5.5 | 2024-04-05 | In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check. This could lead to local information disclosure with no… |
CVE-2024-27232 | Medium | 5.5 | 2024-04-05 | In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclosure with no addit… |
CVE-2024-0072 | Low | 3.3 | 2024-04-05 | NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a… |
CVE-2024-26814 | Medium | 5.5 | 2024-04-05 | In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Block calling interrupt handler without trigger The eventfd_ctx trigger poin… |
CVE-2024-26813 | Medium | 5.5 | 2024-04-05 | In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SET_IRQS ioctl currently… |
CVE-2024-26812 | High | 7.8 | 2024-04-05 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INT… |
CVE-2024-22052 | High | 7.5 | 2024-04-04 | A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious u… |
CVE-2024-22023 | Medium | 5.3 | 2024-04-04 | An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker… |
CVE-2024-26802 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: stmmac: Clear variable when destroying workqueue Currently when suspending driver and sto… |
CVE-2024-26796 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: drivers: perf: ctr_get_width function for legacy is not defined With parameters CONFIG_RI… |
CVE-2024-26793 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_newlink() The gtp_link_ops operations s… |
CVE-2024-26786 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix iopt_access_list_id overwrite bug Syzkaller reported the following WARN_ON: … |
CVE-2024-26784 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: Fix NULL dereference on scmi_perf_domain removal On unloading of the scmi_… |
CVE-2024-26745 | Medium | 4.4 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV When kdump ke… |
CVE-2024-26776 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected Return IRQ_NONE from t… |
CVE-2024-26771 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Add some null pointer checks to the edma_probe devm_kasprintf() retu… |
CVE-2024-26770 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Add missing null pointer checks to LED initialization devm_kasprintf(… |
CVE-2024-26767 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations [why]: issues fixed: - comp… |
CVE-2024-26760 | Critical | 9.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: pscsi: Fix bio_put() for error case As of commit 066ff571011d ("block: turn… |
CVE-2024-26754 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() The gtp_net_ops pernet… |
CVE-2024-26747 | Medium | 4.4 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb rol… |
CVE-2024-26744 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with t… |
CVE-2024-26738 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller When a PCI… |
CVE-2024-26735 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure… |
CVE-2024-26731 | Medium | 5.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready() syzbot report… |
CVE-2024-26729 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv Fixes potential nu… |
CVE-2024-26728 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix null-pointer dereference on edid reading Use i2c adapter when there… |
CVE-2023-52641 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() It is pre… |
CVE-2024-26717 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementatio… |
CVE-2024-26716 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: core: Prevent null pointer dereference in update_port_device_state Currently, the fu… |
CVE-2024-26715 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend In current scenari… |
CVE-2024-26703 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Move hrtimer_init to timerlat_fd open() Currently, the timerlat's hrtim… |
CVE-2024-26700 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV… |
CVE-2024-26695 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked The SEV plat… |
CVE-2024-26688 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super When configuring a hugetl… |
CVE-2024-31420 | Medium | 6.5 | 2024-04-03 | A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics en… |
CVE-2024-29947 | Low | 2.7 | 2024-04-02 | There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an attacker may send s… |
CVE-2024-26677 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix the construction of de… |
CVE-2024-26672 | High | 7.1 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get… |
CVE-2024-26663 | High | 7.8 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() syzbot reported the f… |
CVE-2024-26662 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()' 'panel_c… |