Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 164 of 437.
- GSD-2022-1000297 ax25: improve the incomplete fix to avoid UAF and NPD bugs
- GSD-2022-1000296 libsubcmd: Fix use-after-free for realloc(..., 0)
- GSD-2022-1000295 parisc: Fix data TLB miss in sba_unmap_sg
- GSD-2022-1000294 drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
- GSD-2022-1000293 vsock: remove vsock from connected table when connect is interrupted by a signal
- GSD-2022-1000291 vt_ioctl: fix array_index_nospec in vt_setactivate
- GSD-2022-1000290 net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
- GSD-2022-1000289 net: fix a memleak when uncloning an skb dst and its metadata
- GSD-2022-1000288 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
- GSD-2022-1000287 net: do not keep the dst cache when uncloning an skb dst and its metadata
- GSD-2022-1000286 scsi: target: iscsi: Make sure the np under each tpg is unique
- GSD-2022-1000282 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- GSD-2022-1000281 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- GSD-2022-1000280 ASoC: hdmi-codec: Fix OOB memory accesses
- GSD-2022-1000279 selinux: fix double free of cond_list on error paths
- GSD-2022-1000278 ovl: fix NULL pointer dereference in copy up warning
- GSD-2022-1000277 af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- GSD-2022-1000276 rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- GSD-2022-1000275 net: sched: fix use-after-free in tc_new_tfilter()
- GSD-2022-1000274 net: amd-xgbe: Fix skb data length underflow
- GSD-2022-1000273 ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- GSD-2022-1000272 net/mlx5: Use del_timer_sync in fw reset flow of halting poll
- GSD-2022-1000271 net/mlx5e: Fix handling of wrong devices during bond netevent
- GSD-2022-1000270 net: ipa: prevent concurrent replenish
- GSD-2022-1000269 PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
- GSD-2022-1000268 block: Fix wrong offset in bio_truncate()
- GSD-2022-1000267 net: bridge: vlan: fix memory leak in __allowed_ingress
- GSD-2022-1000266 yam: fix a memory leak in yam_siocdevprivate()
- GSD-2022-1000265 drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
- GSD-2022-1000264 net/smc: Transitional solution for clcsock race issue
- GSD-2022-1000263 powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending
- GSD-2022-1000262 phylib: fix potential use-after-free
- GSD-2022-1000261 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
- GSD-2022-1000260 KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance
- GSD-2022-1000259 drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- GSD-2022-1000258 net: fix information leakage in /proc/net/ptype
- GSD-2022-1000257 ARM: 9170/1: fix panic when kasan and kprobe are enabled
- GSD-2022-1000256 scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- GSD-2022-1000255 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- GSD-2022-1000254 i40e: Fix queues reservation for XDP
- GSD-2022-1000253 powerpc/32s: Fix kasan_init_region() for KASAN
- GSD-2022-1000252 mm, kasan: use compare-exchange operation to set KASAN page tag
- GSD-2022-1000251 USB: core: Fix hang in usb_kill_urb by adding memory barriers
- GSD-2022-1000250 usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- GSD-2022-1000249 usb: xhci-plat: fix crash when suspend if remote wake enable
- GSD-2022-1000248 KVM: x86: Forcibly leave nested virt when SMM state is toggled
- GSD-2022-1000247 KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- GSD-2022-1000246 psi: Fix uaf issue when psi trigger is destroyed while being polled
- GSD-2022-1000245 ceph: properly put ceph_string reference after async create attempt
- GSD-2022-1000244 tracing/histogram: Fix a potential memory leak for kstrdup()
- GSD-2022-1000243 efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
- GSD-2022-1000242 udf: Fix NULL ptr deref when converting from inline format
- GSD-2022-1000241 bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
- GSD-2022-1000240 Bluetooth: refactor malicious adv data check
- GSD-2022-1000239 drm/vmwgfx: Fix stale file descriptors on failed usercopy
- GSD-2022-1000238 select: Fix indefinitely sleeping task in poll_schedule_timeout()
- GSD-2022-1000237 tipc: improve size validations for received domain records
- GSD-2022-1000236 moxart: fix potential use-after-free on remove path
- GSD-2022-1000235 ext4: fix error handling in ext4_fc_record_modified_inode()
- GSD-2022-1000234 perf/x86/intel/pt: Fix crash with stop filters in single-range mode
- GSD-2022-1000233 bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
- GSD-2022-1000232 gve: fix the wrong AdminQ buffer queue index check
- GSD-2022-1000231 scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- GSD-2022-1000230 ASoC: max9759: fix underflow in speaker_gain_control_put()
- GSD-2022-1000229 net: macsec: Fix offload support for NETDEV_UNREGISTER event
- GSD-2022-1000228 iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- GSD-2022-1000227 spi: uniphier: fix reference count leak in uniphier_spi_probe()
- GSD-2022-1000226 net: ieee802154: ca8210: Stop leaking skb's
- GSD-2022-1000225 RDMA/ucma: Protect mc during concurrent multicast leaves
- GSD-2022-1000224 RDMA/cma: Use correct address when leaving multicast group
- GSD-2022-1000223 IB/hfi1: Fix AIP early init panic
- GSD-2022-1000222 dma-buf: heaps: Fix potential spectre v1 gadget
- GSD-2022-1000221 mm/kmemleak: avoid scanning potential huge holes
- GSD-2022-1000220 drm/nouveau: fix off by one in BIOS boundary checking
- GSD-2022-1000219 btrfs: fix deadlock between quota disable and qgroup rescan worker
- GSD-2022-1000218 ALSA: hda: Fix UAF of leds class devs at unbinding
- GSD-2022-1000217 ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- GSD-2022-1000216 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- GSD-2022-1000215 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- GSD-2022-1000214 selinux: fix double free of cond_list on error paths
- GSD-2022-1000213 af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- GSD-2022-1000212 rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- GSD-2022-1000211 net: sched: fix use-after-free in tc_new_tfilter()
- GSD-2022-1000210 net: amd-xgbe: Fix skb data length underflow
- GSD-2022-1000209 ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- GSD-2022-1000208 net/mlx5: Use del_timer_sync in fw reset flow of halting poll
- GSD-2022-1000207 net/mlx5e: Fix handling of wrong devices during bond netevent
- GSD-2022-1000206 net: ipa: prevent concurrent replenish
- GSD-2022-1000205 block: Fix wrong offset in bio_truncate()
- GSD-2022-1000204 PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
- GSD-2022-1000203 net: bridge: vlan: fix memory leak in __allowed_ingress
- GSD-2022-1000202 yam: fix a memory leak in yam_siocdevprivate()
- GSD-2022-1000201 drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
- GSD-2022-1000200 powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending
- GSD-2022-1000199 phylib: fix potential use-after-free
- GSD-2022-1000198 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
- GSD-2022-1000197 drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- GSD-2022-1000196 net: fix information leakage in /proc/net/ptype
- GSD-2022-1000195 scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- GSD-2022-1000194 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev