CVE-2021-47269

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextodep and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer ep...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from pointers being able to access memory outside of a buffer...

CVE-2024-35940 pstore/zone: Add a null pointer check to the psz_kmsg_read

In the Linux kernel, the following vulnerability has been resolved: pstore/zone: Add a null pointer check to the pszkmsgread kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity...

CVE-2024-35891

CVE-2024-35891: In the Linux kernel, lan8814_get_sig_rx() and lan8814_get_sig_tx() may dereference a NULL ptp_header returned by ptp_parse_header() for abnormal or corrupted packets. The fix adds a check for ptp_header to prevent a potential null pointer dereference. Connected advisories confirm ...

CVE-2023-52696

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opalpowercapinit kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure...

CVE-2023-34288 Ashlar-Vellum Cobalt XE File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt XE File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2024-31413

A free of pointer not at start of buffer vulnerability (CWE-761) exists in Omron software used for manufacturing automation, specifically CX-One (versions 4.61.1 and earlier) and Sysmac Studio (versions 1.56 and earlier). The root cause stems from the improper use of the "Free" function on a poin...

CVE-2021-47197

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq-dbg pointer in mlx5debugcqremove Prior to this patch in case mlx5coredestroycq failed it proceeds to rest of destroy operations. mlx5coredestroycq could be called again by user and cause additional call of...

CVE-2021-47183

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix link down processing to address NULL pointer dereference If an FC link down transition while PLOGIs are outstanding to fabric well known addresses, outstanding ABTS requests may result in a NULL pointer dereferenc...

CVE-2024-26649

CVE-2024-26649 (linux kernel, drm/amdgpu) fixes a NULL pointer dereference in RLC firmware loading. Root cause: when RLC firmware header size is invalid, the firmware pointer is released and later dereferenced. The patch skips the validation to prevent the NULL pointer dereference during subseque...

CVE-2024-30161

The Qt cross-platform software development framework is vulnerable in versions 6.5.4, 6.5.5, and 6.6.2 (specifically qtbase ). The flaw resides in Qt for WebAssembly (wasm) , where QNetworkReply header data can be accessed via a dangling pointer due to improper memory management after deallocatio...

CVE-2023-52492

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function dmaasyncdevicechannelregister can fail. In case of failure, chan-local is freed with freepercpu, and chan-local is nullified. When dmaasyncdeviceunregister is called...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev588-g7edc40fee-mastergpac, which originated from a null pointer reference in gfdashsetupperiod in mediatools/dashclient that allows remote attackers to obtain sensitive information...

CVE-2021-47087

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix incorrect page free bug Pointer to the allocated pages struct page page has already progressed towards the end of allocation. It is incorrect to perform freepagespage, order using this pointer as we would free any...

D-Link DIR-823G Security Vulnerability

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G A1V1.0.2B05 version, which stems from a null pointer dereference vulnerability in the sub41C488 function...

CVE-2021-47045

A flaw was found in the scsi/lpfcIt subsystem of the Linux kernel, where it is possible to call lpfcissueelsplogi passing a did argument for which no matching ndlp is found. A call is then made to lpfcprepelsiocb with a NULL pointer to a lpfcnodelist structure, resulting in a NULL pointer...

CVE-2021-47002 SUNRPC: Fix null pointer dereference in svc_rqst_free()

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null pointer dereference in svcrqstfree When allocpagesnode returns null in svcrqstalloc, the null rqscratchpage pointer will be dereferenced when calling putpage in svcrqstfree. Fix it by adding a null check...

CVE-2021-46981 nbd: Fix NULL pointer in flush_workqueue

In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flushworkqueue Open /dev/nbdX first, the configrefs will be 1 and the pointers in nbddevice are still null. Disconnect /dev/nbdX, then reference a null recvworkq. The protection by configrefs in...

CVE-2021-46981 nbd: Fix NULL pointer in flush_workqueue

In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flushworkqueue Open /dev/nbdX first, the configrefs will be 1 and the pointers in nbddevice are still null. Disconnect /dev/nbdX, then reference a null recvworkq. The protection by configrefs in...

CVE-2021-46981

In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flushworkqueue Open /dev/nbdX first, the configrefs will be 1 and the pointers in nbddevice are still null. Disconnect /dev/nbdX, then reference a null recvworkq. The protection by configrefs in...