CWE-476

5,459 vulnerabilities with CWE-476

CVE-2026-31599 MEDIUM

media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections

CVSS 5.5

CVE-2026-31592 MEDIUM

KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock

CVSS 5.5

CVE-2026-31579 MEDIUM

wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit

CVSS 5.5

CVE-2026-31577 MEDIUM

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

CVSS 5.5

CVE-2026-31562 MEDIUM

drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register

CVSS 5.5

CVE-2026-31559 MEDIUM

LoongArch: Fix missing NULL checks for kstrdup()

CVSS 5.5

CVE-2026-31549 MEDIUM

i2c: cp2615: fix serial string NULL-deref at probe

CVSS 5.5

CVE-2026-31546 MEDIUM

net: bonding: fix NULL deref in bond_debug_rlb_hash_show

CVSS 5.5

CVE-2026-31544 MEDIUM

firmware: arm_scmi: Fix NULL dereference on notify error path

CVSS 5.5

CVE-2026-31540 MEDIUM

drm/i915/gt: Check set_default_submission() before deferencing

CVSS 5.5

CVE-2026-31519 MEDIUM

btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create

CVSS 5.5

CVE-2026-31515 MEDIUM

af_key: validate families in pfkey_send_migrate()

CVSS 5.5

CVE-2026-31510 MEDIUM

Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb

CVSS 5.5

CVE-2026-31481 MEDIUM

tracing: Drain deferred trigger frees if kthread creation fails

CVSS 5.5

CVE-2026-31477 HIGH

ksmbd: fix memory leaks and NULL deref in smb2_lock()

CVSS 7.5

CVE-2026-31458 MEDIUM

mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]

CVSS 5.5

CVE-2026-31457 MEDIUM

mm/damon/sysfs: check contexts->nr in repeat_call_fn

CVSS 5.5

CVE-2026-31453 HIGH

xfs: avoid dereferencing log items after push callbacks

CVSS 7.8

CVE-2026-31450 HIGH

ext4: publish jinode after initialization

CVSS 8.8

CVE-2026-31445 MEDIUM

mm/damon/core: avoid use of half-online-committed context

CVSS 5.5

CVE-2026-31438 MEDIUM

netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators

CVSS 5.5

CVE-2026-31437 MEDIUM

netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry

CVSS 5.5

CVE-2026-31436 CRITICAL

dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()

CVSS 9.8

CVE-2026-33601 MEDIUM

Insufficient validation of zonemd record

CVSS 4.4

CVE-2026-33600 MEDIUM

PowerDNS Recursor 5.2.0-5.2.8, 5.3.0-5.3.5, 5.4.0 - Denial of Service via RPZ Processing

CVSS 4.4