PT-2025-14338

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference or oops exception will occur when the qla1280.c driver is compiled with DEBUG QLA1280 enabled and ql debug level is greater than 2. The issue arises from the intention...

PT-2025-9005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue arises from the ioctl and sysfs handlers unconditionally calling the -enable callback, which can lead to NULL dereference...

CVE-2024-24445

OpenAirInterface CN5G AMF oai-cn5g-amf = 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is...

UBUNTU-CVE-2024-57934

In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READONCE when accessing fgrapharray In ftracereturntohandler, a loop iterates over the fgrapharray elements, which are fgraphops. The loop checks if an element is a fgraphstub to prevent using a fgraphstub afterward...

PT-2025-2384

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF oai-cn5g-amf version 2.0.0 and earlier Description: The issue is related to a null dereference in the handling of unsupported NGAP protocol messages. When a procedure code/presence field tuple is received that is...

CVE-2024-24445

OpenAirInterface CN5G AMF oai-cn5g-amf = 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is...

CVE-2024-24445

OpenAirInterface CN5G AMF oai-cn5g-amf = 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is...

CVE-2024-24445

OpenAirInterface CN5G AMF (oai-cn5g-amf) versions 2.0.0 and earlier are vulnerable to a null pointer dereference during the processing of unsupported NGAP protocol messages . When the software receives a procedure code/presence field tuple that is not supported, it indexes into a null function po...

SUSE CVE-2024-57925

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2sendinterimresp, if ksmbdallocworkstruct fails to allocate a node, it returns a NULL pointer to the inwork pointer. This can lead to an illegal memory write of...

SUSE CVE-2025-21638

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: authenable: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the xegttlbinvalidationinit function that may not be properly initialized when a device is wedged wedged,...

CVE-2025-0430

Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition...

CVE-2025-0430

CVE-2025-0430 concerns Belledonne Communications Linphone-Desktop with a NULL pointer dereference that could allow a remote attacker to cause a denial-of-service. Connected sources confirm the vulnerability type and impact (DoS) but do not publicly specify affected versions or a fixed/mitigation ...

PT-2025-3885 · Belledonne Communications · Linphone-Desktop

Name of the Vulnerable Software and Affected Versions: Belledonne Communications Linphone-Desktop affected versions not specified Description: The issue is a NULL Dereference vulnerability that could allow a remote attacker to create a denial-of-service condition. This vulnerability affects...

PT-2025-8776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue has been identified in the Linux kernel related to the mt7925 wifi driver. Specifically, in the mt7925 change vif links function, devm kzalloc may return NULL, but this returned...

DEBIAN-CVE-2024-57881

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In splitlargebuddy, we might call pfntopage on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last...

CVE-2024-57798

In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleupreq While receiving an MST up request message from one thread in drmdpmsthandleupreq, the MST topology could be removed from another thread via...

DEBIAN-CVE-2024-57798

In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleupreq While receiving an MST up request message from one thread in drmdpmsthandleupreq, the MST topology could be removed from another thread via...

AZL-56166 CVE-2024-47809 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereference when this function is called from requestlock as lkb-lkbresource is not assigned yet, only after validatelockargs by calling...

DEBIAN-CVE-2024-47809

In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereference when this function is called from requestlock as lkb-lkbresource is not assigned yet, only after validatelockargs by calling...