CWE-476

5,459 vulnerabilities with CWE-476

CVE-2026-43367 MEDIUM

drm/amd: Fix a few more NULL pointer dereference in device cleanup

CVSS 5.5

CVE-2026-43364 MEDIUM

ublk: fix NULL pointer dereference in ublk_ctrl_set_size()

CVSS 5.5

CVE-2026-43356 MEDIUM

iio: imu: adis: Fix NULL pointer dereference in adis_init

CVSS 5.5

CVE-2026-43337 MEDIUM

drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()

CVSS 5.5

CVE-2026-43335 MEDIUM

interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()

CVSS 5.5

CVE-2026-43333 MEDIUM

bpf: reject direct access to nullable PTR_TO_BUF pointers

CVSS 5.5

CVE-2026-43313 MEDIUM

ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()

CVSS 5.5

CVE-2026-43300 MEDIUM

drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()

CVSS 5.5

CVE-2026-43297 MEDIUM

media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

CVSS 5.5

CVE-2026-39836 HIGH

Panic in Dial and LookupPort when handling NUL byte on Windows in net

CVSS 7.5

CVE-2026-41684 MEDIUM

Incus: Nil Dereferences on Restore via Malformed YAML

CVSS 6.5

CVE-2026-41647 MEDIUM

Incus: Nil-Pointer Dereference via S3 Bucket Import

CVSS 6.5

CVE-2026-42285 HIGH

GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)

CVSS 7.5

CVE-2026-41642 HIGH

GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute

CVSS 7.5

CVE-2026-8063 MEDIUM

Post-auth null pointer dereference when aggregating against a view with empty search pipeline

CVSS 6.5

CVE-2026-44602 LOW

Tor < 0.4.9.7 - Denial of Service via Out-of-Order CERT Cell

CVSS 3.7

CVE-2026-40197 MEDIUM

Incus nil-pointer dereference in custom volume import allows denial of service

CVSS 6.5

CVE-2026-40195 MEDIUM

Incus nil-pointer dereference in storage bucket import allows denial of service

CVSS 6.5

CVE-2026-43282 MEDIUM

RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port

CVSS 5.5

CVE-2026-43272 MEDIUM

ring-buffer: Fix possible dereference of uninitialized pointer

CVSS 5.5

CVE-2026-43271 MEDIUM

md-cluster: fix NULL pointer dereference in process_metadata_update

CVSS 5.5

CVE-2026-43263 HIGH

media: chips-media: wave5: Fix Null reference while testing fluster

CVSS 7.8

CVE-2026-43251 MEDIUM

HID: prodikeys: Check presence of pm->input_ep82

CVSS 5.5

CVE-2026-43216 MEDIUM

net: Drop the lock in skb_may_tx_timestamp()

CVSS 5.5

CVE-2026-43213 HIGH

wifi: rtw89: pci: validate sequence number of TX release report

CVSS 7.5