Vulnerability index

Browse CVEs

2,191 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness NULL Pointer DereferenceCWE-476 × clear
Linux Kernel MEDIUM 5.5
CVE-2023-2166

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the recei…

Fix: 6.1+
Fix from $1,600 2023-04-19
Linux Kernel MEDIUM 5.5
CVE-2023-1583

A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed file…

Fix: 6.1.22 / 6.2.9+
Fix from $1,600 2023-03-24
Linux Kernel HIGH 7.0
CVE-2023-28466

do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-a…

Fix: 5.10.177 / 5.15.105+
Fix from $1,950 2023-03-16
Linux Kernel MEDIUM 5.5
CVE-2023-23005

In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas …

Fix: 6.2+
Fix from $1,600 2023-03-01
Linux Kernel MEDIUM 5.5
CVE-2023-23006

In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (e…

Fix: 5.15.13+
Fix from $1,600 2023-03-01
Linux Kernel MEDIUM 5.5
CVE-2023-23004

In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error …

Fix: 5.19+
Fix from $1,600 2023-03-01
Linux Kernel MEDIUM 5.5
CVE-2023-23001

In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error c…

Fix: 5.16.3+
Fix from $1,600 2023-03-01
Linux Kernel MEDIUM 5.5
CVE-2023-23002

In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in…

Fix: 5.16.3+
Fix from $1,600 2023-03-01
Linux Kernel MEDIUM 5.5
CVE-2023-23000

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error cas…

Fix: 5.17+
Fix from $1,600 2023-03-01
Linux Kernel MEDIUM 5.5
CVE-2023-1095

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() ca…

Fix: 6.0+
Fix from $1,600 2023-02-28
Linux Kernel MEDIUM 5.5
CVE-2023-22997

In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error …

Fix: 6.1.2+
Fix from $1,600 2023-02-28
Linux Kernel MEDIUM 5.5
CVE-2023-22999

In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NUL…

Fix: 5.16.3+
Fix from $1,600 2023-02-28
Linux Kernel MEDIUM 5.5
CVE-2023-0394

A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw c…

Fix: 6.2+
Fix from $1,600 2023-01-26
Linux Kernel HIGH 7.5
CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Deni…

Patch available
Fix from $1,950 2023-01-17
Linux Kernel MEDIUM 5.5
CVE-2022-47929

In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of …

Fix: 6.1.6+
Fix from $1,600 2023-01-17
Linux Kernel HIGH 7.1
CVE-2022-41858

A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/n…

Fix: 4.9.311 / 4.14.276+
Fix from $1,950 2023-01-17
Linux Kernel MEDIUM 5.5
CVE-2022-4842

A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the …

Mitigation only
Fix from $1,600 2023-01-12
Linux Kernel MEDIUM 5.5
CVE-2022-3110

An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of the retur…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3111

An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3112

An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of t…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3113

An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks c…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3114

An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kc…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3115

An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value …

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3104

An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmal…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3105

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3106

An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return va…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-3107

An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return v…

Fix: 5.16.0+
Fix from $1,600 2022-12-14
Linux Kernel MEDIUM 5.5
CVE-2022-4127

A NULL pointer dereference issue was discovered in the Linux kernel in io_files_update_with_index_alloc. A local user could use this flaw to potentia…

Patch available
Fix from $1,600 2022-11-28
Linux Kernel MEDIUM 5.5
CVE-2022-4128

A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A loca…

Fix: after 5.18
Fix from $1,600 2022-11-28
Linux Kernel MEDIUM 6.5
CVE-2022-3621

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/…

Patch available
Fix from $1,600 2022-10-20