PT-2025-3577

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises in the Linux kernel's drm/dp mst module, specifically in the drm dp mst handle up req function. When receiving an MST up request message from one thread, the MST topology could...

PT-2024-17493 · Msi · Ntiolib X64.Sys +1

Name of the Vulnerable Software and Affected Versions: MSI Dragon Center versions up to 2.0.146.0 Description: A problematic issue was found in the IOCTL Handler component of MSI Dragon Center, affecting the MmUnMapIoSpace function in the NTIOLib X64.sys library. This leads to a null pointer...

kernel: spi: Fix null dereference on suspend

In the Linux kernel, the following vulnerability has been resolved: spi: Fix null dereference on suspend A race condition exists where a synchronous noqueue transfer can be active during a system suspend. This can cause a null pointer dereference exception to occur when the system resumes. Exampl...

kernel: spi: Fix null dereference on suspend

In the Linux kernel, the following vulnerability has been resolved: spi: Fix null dereference on suspend A race condition exists where a synchronous noqueue transfer can be active during a system suspend. This can cause a null pointer dereference exception to occur when the system resumes. Exampl...

kernel: nouveau: fix instmem race condition around ptr stores

A flaw was found in the nouveau module in the Linux kernel. In some conditions, a race condition can cause a NULL pointer dereference, resulting in a denial of service...

PT-2025-9945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL dereference issue has been identified in the Linux kernel, specifically in the cfg80211 tests. The kunit kzalloc function may return NULL, and without a proper NULL chec...

SUSE CVE-2024-42329

The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...

PT-2024-37006

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL dereference vulnerability has been identified in the Linux kernel, specifically in the ALSA core. The issue is caused by the function kunit kzalloc, which may return a NU...

file:magic_fuzzer_fd: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=4687713548173312 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerfd Job Type: libfuzzerubsanfile Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash...

PT-2024-36976

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference vulnerability has been resolved in the Linux kernel's drm/amdkfd component. The issue occurred in the function pqm uninit, where a call-assignment of pdd = kfd get...

CVE-2024-53056

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

samba:fuzz_ndr_spoolss_TYPE_OUT: Segv on unknown address in ndr_print_and_forget

Detailed Report: https://oss-fuzz.com/testcase?key=6580445763403776 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ndrprintandforget...

CVE-2024-53056

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

UBUNTU-CVE-2024-53056

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

CVE-2024-53056 drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

CVE-2024-53056 drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

CVE-2024-53056 drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

CVE-2024-53056

CVE-2024-53056 affects the Linux kernel in the drm/mediatek component, specifically the mtk_crtc_destroy() NULL-dereference risk caused by cleanup behavior when mtk_crtc_create() fails to obtain a channel via mbox_request_channel(). The issue arises because, if the call to mbox_request_channel() ...

SUSE CVE-2024-50281

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

CVE-2024-50281

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...