109827 matches found
CVE-2021-26690---Apache-mod_session
Patch diffing for CVE-2021-26690 - Apache modsession This vulnerability is a NULL pointer dereference within the modsession Apache's module. It will cause a denial of service for the child processes of Apache's httpd. By using a repetitive loop, each Apache workers will crash, leading to a denial...
CVE-2026-90430
A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A local attacker could potentially trigger a system crash, leading to a Denial of Service DoS. This occurs because a pointer to a command queue vcmdq is stored before it is fully initialized. If an error is encountered during...
CVE-2026-80917
A flaw was found in the Linux kernel's PCI host-generic component. On 32-bit systems utilizing the "pci-host-cam-generic" driver, a missing bus mapping setup during Peripheral Component Interconnect PCI configuration can lead to a NULL pointer dereference. This vulnerability can be triggered duri...
CVE-2026-92492
A flaw was found in the Linux kernel's cpufreq/amd-pstate component. A local attacker could potentially trigger a NULL pointer dereference by performing a racing CPU hotplug or driver teardown operation. This occurs because certain functions, amdpstatepowersupplynotifier and amdpstateprofileset, ...
CVE-2026-92491
A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the registration of protocol tables, the scmiprotocoltableregister function may fail to properly unregister previous requests if a subsequent entry fails. This can result in a dangling pointer...
CVE-2026-92479
A flaw was found in the Linux kernel's Universal Flash Storage UFS host controller driver. When an invalid completion queue entry CQE tag is reported, the driver attempts to dereference a NULL pointer, which can lead to a system crash. This vulnerability could allow a local attacker to cause a...
CVE-2026-90405
A flaw was found in the media: stm32: dcmi component of the Linux kernel. Improper error handling in the probe function can lead to a null pointer dereference. This issue occurs because dmareleasechannel is called before the dcmi-dmachan variable is properly assigned, potentially allowing a local...
CVE-2026-90400
A flaw was found in the Linux kernel's Multiple Device MD driver. A race condition exists where the system may attempt to remove or replace RAID array devices while they are still actively being used for input/output operations. This can lead to a null pointer dereference, causing the system to...
CVE-2026-90397
A flaw was found in the Linux kernel's Qualcomm qcom Secure Channel Manager SCM firmware component. This vulnerability allows for a NULL pointer dereference due to improper initialization of a shared memory pointer. An attacker could exploit this timing issue, potentially leading to a system cras...
CVE-2026-90374
A flaw was found in the Linux kernel's mt76 wifi driver. This vulnerability occurs due to improper validation of the bandidx field, which is used to index an array. A malicious actor could provide a corrupt or reserved descriptor value, leading to an out-of-bounds access or a NULL pointer...
CVE-2026-90368
A flaw was found in the Wi-Fi driver mt76: mt7915 of the Linux kernel. Improper error handling during the addition of a new Wi-Fi interface can lead to the permanent leakage of system resources and a stale pointer dereference. This vulnerability could allow a local attacker to cause system...
CVE-2021-38304-PoC
CVE-2021-38304 Proof of Concept Overview This repository contains a proof of concept for a critical security vulnerability in older versions of the National Instruments nipalk.sys driver. The vulnerability allows for arbitrary code execution and memory disclosure in kernel mode. It is intended...
CVE-2026-98477
A flaw was found in the Linux kernel's performance monitoring subsystem perf. When switching tasks during performance event handling, the kernel can pass an uninitialized NULL pointer to hardware performance monitoring drivers. A local user can exploit this issue during task execution to trigger ...
CVE-2026-98476
A flaw was found in the Linux kernel's s390 channel I/O CIO subsystem. When querying device utility strings, the kernel fails to verify that an associated channel path remains valid after its removal from the registry. A local user could exploit this condition during hardware reconfiguration,...
CVE-2026-45729
CVE-2026-45729 — ThorVG NULL Pointer Dereference via Malformed SVG Severity: CVSS 4.3 Medium — CWE-476 Advisory: GHSA-f863-8ghq-7h64 Fixed: ThorVG v1.0.5 Status: Patched / Disclosed Summary ThorVG's SVG parser dereferences a pointer that is never initialized when it encounters a truncated child...
CVE-2026-43841
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function...
CVE-2026-43842
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function when msglen is set to 0...
CVE-2026-43839
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service...
