CWE-476: NULL Pointer Dereference vulnerabilities

CVE-2024-58012 is a vulnerability in the Linux kernel's ASoC SOF Intel hda-dai component. It involves a NULL pointer dereference caused by missing DAI widgets in audio topologies with aggregated amplifiers. The issue arises because each CPU DAI should be associated with a valid widget, but the topology may not create the correct number of DAI widgets, leading to invalid references during parameter handling.

CVE-2025-21723 is a vulnerability in the Linux kernel's mpi3mr SCSI driver where a failure in setting up the block storage gateway (bsg) queue can lead to a kernel crash due to a NULL pointer dereference. This occurs because the bsg_queue pointer is incorrectly assigned a non-NULL value even when setup fails, preventing proper cleanup and causing a crash during device removal.

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

CVE-2025-21658 is a vulnerability in the Linux kernel's Btrfs filesystem that causes a NULL pointer dereference when no valid extent tree is present. This occurs during a scrub operation on a corrupted filesystem image mounted with rescue options. The flaw leads to a kernel crash (NULL pointer dereference) due to missing validation of the extent root pointer in the scrub_find_fill_first_stripe() function. The issue has been fixed by adding a check for a valid extent root early in the function.

CVE-2025-21635 is a medium severity vulnerability in the Linux kernel related to the rds_tcp_{rcv,snd}buf sysctl interface. It involves improper use of the current->nsproxy pointer, which can be NULL in some cases, leading to a null pointer dereference and kernel crash (Oops). The issue arises because using the 'net' structure via 'current' is inconsistent and unsafe, especially when the current task is exiting. The vulnerability has been resolved by avoiding the use of current->nsproxy and instead obtaining the per-netns structure from the table data.

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2024-56611 is a vulnerability in the Linux kernel's memory policy subsystem where the function migrate_to_node() incorrectly assumes the presence of at least one virtual memory area (VMA) in a memory descriptor (MM). This assumption can lead to a null pointer dereference when find_vma() returns NULL, causing a general protection fault and kernel crash.

CVE-2024-53224 is a high severity vulnerability in the Linux kernel's RDMA mlx5 driver. It involves a race condition during device deregistration and pkey change work, which can lead to a kernel NULL pointer dereference and system panic. The issue is fixed by reordering event notifier registration to occur after device registration, preventing work from executing after device unregistration.

CVE-2024-53201 is a vulnerability in the Linux kernel's AMD display driver where insufficient null pointer checks for pipe_ctx->plane_state in the dcn20_program_pipe function could lead to a null pointer dereference. This issue was partially addressed previously but remained in the dcn20_update_dchubp_dpp function, risking kernel stability. The flaw affects specific Linux kernel versions 6.6.64 and 6.11.3.

A null pointer dereference vulnerability exists in GStreamer's parse_lrc function in gstsubparse.c. The flaw occurs when the function strchr() fails to find the character ']' in a string, returning NULL, which is then passed to g_strdup(), causing a null pointer dereference. This issue is fixed in version 1.24.10.

A null pointer dereference vulnerability exists in GStreamer's gst_gdk_pixbuf_dec_flush function, which can cause a denial of service via a segmentation fault. This occurs when the function attempts to memcpy to a null frame pointer. The issue is fixed in version 1.24.10.

A null pointer dereference vulnerability exists in GStreamer's gst_matroska_demux_update_tracks function due to improper handling of invalid caps values. This flaw can cause a null pointer dereference when gst_buffer_get_size attempts to access a size field via a null pointer. The issue is resolved in version 1.24.10.

A null pointer dereference vulnerability exists in GStreamer's gst_matroska_demux_add_wvpk_header function in matroska-demux.c. The function fails to validate the stream->codec_priv pointer before dereferencing it, which can cause the application to crash if this pointer is NULL. This issue is resolved in version 1.24.10.

A null pointer dereference vulnerability exists in GStreamer's gst_matroska_demux_parse_blockgroup_or_simpleblock function. This occurs because the function does not properly validate the GstBuffer *sub pointer before dereferencing it. The issue is fixed in version 1.24.10.

A null pointer dereference vulnerability exists in the gst_jpeg_dec_negotiate function of GStreamer prior to version 1.24.10. The function fails to check for a NULL return from gst_video_decoder_set_output_state, leading to a potential segmentation fault and Denial of Service (DoS). This issue is fixed in version 1.24.10.

A null pointer dereference vulnerability exists in the qtdemux_parse_sbgp function of the GStreamer media-handling library. This flaw can lead to a denial of service or application crash. The issue is resolved in version 1.24.10.

A null pointer dereference vulnerability exists in GStreamer's id3v2_read_synch_uint function in id3v2.c. If called with a null frame_data pointer, it causes a segmentation fault leading to denial of service. This issue is fixed in version 1.24.10.

CVE-2024-53056 is a medium severity vulnerability in the Linux kernel's drm/mediatek driver. It involves a potential NULL pointer dereference in the mtk_crtc_destroy() function. This occurs when mbox_request_channel() fails during mtk_crtc_create(), resulting in a NULL pointer that is not properly checked before calling cmdq_pkt_destroy(). This flaw can cause a kernel crash (denial of service) but does not impact confidentiality or integrity.

CVE-2024-43559 is a denial of service vulnerability in the Windows Mobile Broadband Driver affecting multiple Windows 10 versions. The flaw is due to a NULL pointer dereference, which can cause system instability or crashes. Microsoft has released official fixes for all affected versions.

CVE-2024-43520 is a denial of service vulnerability in the Windows Kernel affecting multiple versions of Microsoft Windows 10, including Version 1507 and others. The flaw is due to a NULL pointer dereference, which can cause system crashes. Microsoft has released official fixes for all affected versions.