544 matches found
CVE-2021-47077
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedfupdatelinkspeed The following trace was observed: 14.042059 Call Trace: 14.042061 14.042068 qedflinkupdate+0x144/0x1f0 qedf 14.042117 qedlinkupdate+0x5c/0x80 qed 14.042135...
SUSE CVE-2021-47003
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxdcmdexec that pass a null status pointer however a recent commit has added an assignment to status that can end up with a null pointer...
PT-2024-6076 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a crash when adding a lan966x interface under a lag interface in the Linux kernel. This can be reproduced by running specific commands, such as "ip link add nam...
CVE-2023-20800
In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420955...
CVE-2023-20800
In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420955...
MediaTek Chip Security Breach
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a missing ptr check in the imgsys module, and may cause a system crash...
PT-2023-5567 · Mediatek · Mediatek Imgsys
Name of the Vulnerable Software and Affected Versions: MediaTek imgsys affected versions not specified Description: The issue is related to insufficient input validation in the imgsys component of MediaTek microprogram software, which can lead to a system crash due to a missing pointer check. Thi...
CVE-2023-0359
A missing nullptr-check in handlerainput can cause a nullptr-deref...
CLSA-2023-1685634253 vim: Fix of CVE-2023-2609
CVE-2023-2609: check "yarray" is not NULL...
SUSE CVE-2017-9345
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...
CVE-2022-32955
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...
PT-2023-33155 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a null pointer check in the coretemp component of the hwmon subsystem. It was introduced in version v3.0 and fixed in version v6.0.12. The actual impact and attack...
PT-2023-33320 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a null pointer check in the coretemp hwmon driver. It was introduced in version v3.0 and fixed in version v5.10.158. The actual impact and attack plausibility have...
PT-2023-33414 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue is related to a null pointer check in the coretemp hardware monitoring component. It was introduced in version v3.0 and fixed in version v4.19.268. The actual impact and attack...
PT-2025-37898
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The btrtl set quirks function accessed a memory location without verifying its validity, potentially leading to a kernel error when a Realtek Bluetooth controller without a supported...
PT-2022-19517 · Intel · Fwblockservicesmm
Name of the Vulnerable Software and Affected Versions: FwBlockServiceSmm driver versions prior to 05.21.51.0048 FwBlockServiceSmm driver versions prior to 05.42.23.0066 FwBlockServiceSmm driver versions prior to 05.42.11.0021 FwBlockServiceSmm driver versions prior to 05.44.25.0052...
GSD-2022-1003296 lkdtm/bugs: Check for the NULL pointer after calling kmalloc
lkdtm/bugs: Check for the NULL pointer after calling kmalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...
GSD-2021-1002817 drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
drm/mediatek: hdmi: Perform NULL pointer check for mtkhdmiconf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference because it lacks a pointer check before an idecanceldmasync call...
UVI-2021-1000954 usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL
usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...