CWE-476

5,266 vulnerabilities with CWE-476

CVE-2026-43297 MEDIUM

media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

CVSS 5.5

CVE-2026-39836 HIGH

Panic in Dial and LookupPort when handling NUL byte on Windows in net

CVSS 7.5

CVE-2026-41684 MEDIUM

Incus: Nil Dereferences on Restore via Malformed YAML

CVSS 6.5

CVE-2026-41647 MEDIUM

Incus: Nil-Pointer Dereference via S3 Bucket Import

CVSS 6.5

CVE-2026-42285 HIGH

GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)

CVSS 7.5

CVE-2026-41642 HIGH

GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute

CVSS 7.5

CVE-2026-8063 MEDIUM

Post-auth null pointer dereference when aggregating against a view with empty search pipeline

CVSS 6.5

CVE-2026-44602 LOW

Tor < 0.4.9.7 - Denial of Service via Out-of-Order CERT Cell

CVSS 3.7

CVE-2026-40197 MEDIUM

Incus nil-pointer dereference in custom volume import allows denial of service

CVSS 6.5

CVE-2026-40195 MEDIUM

Incus nil-pointer dereference in storage bucket import allows denial of service

CVSS 6.5

CVE-2026-43282 MEDIUM

RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port

CVSS 5.5

CVE-2026-43272 MEDIUM

ring-buffer: Fix possible dereference of uninitialized pointer

CVSS 5.5

CVE-2026-43271 MEDIUM

md-cluster: fix NULL pointer dereference in process_metadata_update

CVSS 5.5

CVE-2026-43263 HIGH

media: chips-media: wave5: Fix Null reference while testing fluster

CVSS 7.8

CVE-2026-43251 MEDIUM

HID: prodikeys: Check presence of pm->input_ep82

CVSS 5.5

CVE-2026-43216 MEDIUM

net: Drop the lock in skb_may_tx_timestamp()

CVSS 5.5

CVE-2026-43213 HIGH

wifi: rtw89: pci: validate sequence number of TX release report

CVSS 7.5

CVE-2026-43207 HIGH

media: mtk-mdp: Fix error handling in probe function

CVSS 7.8

CVE-2026-43175 MEDIUM

clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841

CVSS 5.5

CVE-2026-43173 MEDIUM

net: ethernet: xscale: Check for PTP support properly

CVSS 5.5

CVE-2026-43164 HIGH

udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb().

CVSS 7.5

CVE-2026-43159 MEDIUM

staging: rtl8723bs: fix null dereference in find_network

CVSS 5.5

CVE-2026-43148 MEDIUM

powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()

CVSS 5.5

CVE-2026-43144 MEDIUM

wifi: brcmfmac: Fix potential kernel oops when probe fails

CVSS 5.5

CVE-2026-43140 MEDIUM

HID: magicmouse: Do not crash on missing msc->input

CVSS 5.5