Vulnerability index

Browse CVEs

2,191 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness NULL Pointer DereferenceCWE-476 × clear
Linux Kernel MEDIUM 6.4
CVE-2020-25285

A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory,…

Fix: 5.8.8+
Fix from $1,600 2020-09-13
Linux Kernel HIGH 7.8
CVE-2020-14356

A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local…

Fix: 4.9.231 / 4.14.189+
Fix from $1,950 2020-08-19
Linux Kernel MEDIUM 5.9
CVE-2020-10711

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commer…

Fix: 5.7+
Fix from $1,600 2020-05-22
Linux Kernel HIGH 7.1
CVE-2020-11668

In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a…

Fix: 5.6.1+
Fix from $1,950 2020-04-09
Linux Kernel MEDIUM 5.5
CVE-2019-20054

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-…

Fix: 5.0.6+
Fix from $1,600 2019-12-28
Linux Kernel MEDIUM 5.5
CVE-2019-19815

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recov…

Patch available
Fix from $1,600 2019-12-17
Linux Kernel MEDIUM 5.5
CVE-2019-19462

relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering…

Fix: after 5.4.1
Fix from $1,600 2019-11-30
Linux Kernel MEDIUM 5.5
CVE-2019-10207

A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with l…

Fix: 4.18.0+
Fix from $1,600 2019-11-25
Linux Kernel MEDIUM 5.5
CVE-2019-19227

In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL…

Fix: 5.1+
Fix from $1,600 2019-11-22
Linux Kernel MEDIUM 5.5
CVE-2019-19037

ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTRE…

Fix: after 5.3.12
Fix from $1,600 2019-11-21
Linux Kernel MEDIUM 5.5
CVE-2019-19036

btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be z…

Fix: after 5.3.12
Fix from $1,600 2019-11-21
Linux Kernel MEDIUM 5.5
CVE-2019-18885

fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_dev…

Fix: 5.1+
Fix from $1,600 2019-11-14
Linux Kernel HIGH 7.5
CVE-2019-18680

An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c that wi…

Fix: 4.4.195+
Fix from $1,950 2019-11-04
Linux Kernel MEDIUM 5.5
CVE-2019-15922

An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/…

Fix: 5.0.9+
Fix from $1,600 2019-09-04
Linux Kernel MEDIUM 5.5
CVE-2019-15923

An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/…

Fix: 5.0.9+
Fix from $1,600 2019-09-04
Linux Kernel MEDIUM 5.5
CVE-2019-15924

An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dere…

Fix: 5.0.11+
Fix from $1,600 2019-09-04
Linux Kernel HIGH 7.5
CVE-2019-15099

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descr…

Fix: 4.14.157 / 4.19.87+
Fix from $1,950 2019-08-16
Linux Kernel MEDIUM 5.5
CVE-2019-10140

A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of s…

Fix: after 3.10
Fix from $1,600 2019-08-15
Linux Kernel HIGH 7.5
CVE-2018-16871

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exp…

Fix: after 4.20
Fix from $1,950 2019-07-30
Linux Kernel MEDIUM 5.5
CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be t…

Fix: 5.1.13+
Fix from $1,600 2019-06-26
Linux Kernel HIGH 7.8
CVE-2019-12881

i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a deni…

No fix yet
Fix from $1,950 2019-06-18
Linux Kernel HIGH 7.5
CVE-2019-12818EPSS 5%

An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller…

Fix: 4.20.15+
Fix from $1,950 2019-06-14
Linux Kernel HIGH 7.5
CVE-2019-12615

An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_cons…

Fix: 4.14.130 / 4.19.56+
Fix from $1,950 2019-06-03
Linux Kernel MEDIUM 5.5
CVE-2019-12455

An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of…

Fix: after 5.1.5
Fix from $1,600 2019-05-30
Linux Kernel MEDIUM 5.5
CVE-2019-12378

An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, whi…

Fix: after 5.1.5
Fix from $1,600 2019-05-28
Linux Kernel MEDIUM 5.5
CVE-2019-12381

An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which …

Fix: after 5.1.5
Fix from $1,600 2019-05-28
Linux Kernel MEDIUM 5.5
CVE-2019-12382

An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup…

Fix: after 5.1.5
Fix from $1,600 2019-05-28
Linux Kernel MEDIUM 5.5
CVE-2018-7191

In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause…

Fix: 4.13.14+
Fix from $1,600 2019-05-17
Linux Kernel HIGH 7.5
CVE-2019-11810EPSS 6%

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_allo…

Fix: 3.16.69 / 3.18.139+
Fix from $1,950 2019-05-07
Linux Kernel MEDIUM 5.5
CVE-2019-9213EPSS 6%

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to …

Fix: 4.9.162 / 4.14.105+
Fix from $1,600 2019-03-05