Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 172 of 437.
- CVE-2022-50715 md/raid1: stop mdx_raid1 thread when raid1 array run failed
- CVE-2022-50714 wifi: mt76: mt7921e: fix rmmod crash in driver reload test
- CVE-2022-50713 clk: visconti: Fix memory leak in visconti_register_pll()
- CVE-2022-50712 devlink: hold region lock when flushing snapshots
- CVE-2022-50711 net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe()
- CVE-2022-50710 ice: set tx_tstamps when creating new Tx rings via ethtool
- CVE-2022-50709 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- CVE-2022-50708 HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()
- CVE-2022-50707 virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
- CVE-2022-50706 net/ieee802154: don't warn zero-sized raw_sendmsg()
- CVE-2022-50705 io_uring/rw: defer fsnotify calls to task context
- CVE-2022-50704 USB: gadget: Fix use-after-free during usb config switch
- CVE-2022-50703 soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- CVE-2022-50702 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
- CVE-2022-50701 wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host
- CVE-2022-50700 wifi: ath10k: Delay the unmapping of the buffer
- CVE-2022-50699 selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
- CVE-2022-50698 ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
- CVE-2022-50697 mrp: introduce active flags to prevent UAF when applicant uninit
- CVE-2022-50696 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass
- CVE-2022-50695 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands
- CVE-2022-50694 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter
- CVE-2022-50693 Splashtop 8.71.12001.0 - Unquoted Service Path
- CVE-2022-50692 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability
- CVE-2022-50691 MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh
- CVE-2022-50690 Wondershare MirrorGo 2.0.11.346 Local Privilege Escalation via Insecure File Permissions
- CVE-2022-50689 Cobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field
- CVE-2022-50688 Cobian Backup Gravity 11.2.0.582 Unquoted Service Path Privilege Escalation
- CVE-2022-50687 Cobian Backup 11 Gravity 11.2.0.582 Local Denial of Service via Password Field
- CVE-2022-50686 Kentico Xperience <= 12.0 Portal Engine Form Control Information Disclosure
- CVE-2022-50685 Kentico Xperience <= 13.0.56 File Upload Stored XSS
- CVE-2022-50684 Kentico Xperience <= 13.0.71 Form Emails HTML Injection
- CVE-2022-50683 Kentico Xperience <= 13.0.74 Form Configuration Stored XSS
- CVE-2022-50682 Kentico Xperience <= 13.0.79 Routing Engine CRLF Injection
- CVE-2022-50681 Kentico Xperience <= 13.0.88 Rich Text Editor Reflected XSS
- CVE-2022-50680 Kentico Xperience <= 13.0.92 Email Marketing Stored XSS
- CVE-2022-50679 i40e: Fix DMA mappings leak
- CVE-2022-50678 wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- CVE-2022-50677 ipmi: fix use after free in _ipmi_destroy_user()
- CVE-2022-50676 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
- CVE-2022-50675 arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored
- CVE-2022-50674 riscv: vdso: fix NULL deference in vdso_join_timens() when vfork
- CVE-2022-50673 ext4: fix use-after-free in ext4_orphan_cleanup
- CVE-2022-50672 mailbox: zynq-ipi: fix error handling while device_register() fails
- CVE-2022-50671 RDMA/rxe: Fix "kernel NULL pointer dereference" error
- CVE-2022-50670 mmc: omap_hsmmc: fix return value check of mmc_add_host()
- CVE-2022-50669 misc: ocxl: fix possible name leak in ocxl_file_register_afu()
- CVE-2022-50668 ext4: fix deadlock due to mbcache entry corruption
- CVE-2022-50667 drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
- CVE-2022-50666 RDMA/siw: Fix QP destroy to wait for all references dropped.
- CVE-2022-50665 wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected
- CVE-2022-50664 media: dvb-frontends: fix leak of memory fw
- CVE-2022-50663 net: stmmac: fix possible memory leak in stmmac_dvr_probe()
- CVE-2022-50662 RDMA/hns: fix memory leak in hns_roce_alloc_mr()
- CVE-2022-50661 seccomp: Move copy_seccomp() to no failure path.
- CVE-2022-50660 wifi: ipw2200: fix memory leak in ipw_wdev_init()
- CVE-2022-50659 hwrng: geode - Fix PCI device refcount leak
- CVE-2022-50658 cpufreq: qcom: fix memory leak in error path
- CVE-2022-50657 riscv: mm: add missing memcpy in kasan_init
- CVE-2022-50656 nfc: pn533: Clear nfc_target before being used
- CVE-2022-50655 ppp: associate skb with a device at tx
- CVE-2022-50654 bpf: Fix panic due to wrong pageattr of im->image
- CVE-2022-50653 mmc: atmel-mci: fix return value check of mmc_add_host()
- CVE-2022-50652 uio: uio_dmem_genirq: Fix missing unlock in irq configuration
- CVE-2022-50651 ethtool: eeprom: fix null-deref on genl_info in dump
- CVE-2022-50650 bpf: Fix reference state management for synchronous callbacks
- CVE-2022-50649 power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- CVE-2022-50648 ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_caller
- CVE-2022-50647 RISC-V: Make port I/O string accessors actually work
- CVE-2022-50646 scsi: hpsa: Fix possible memory leak in hpsa_init_one()
- CVE-2022-50645 EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
- CVE-2022-50644 clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- CVE-2022-50643 cifs: Fix xid leak in cifs_copy_file_range()
- CVE-2022-50642 platform/chrome: cros_ec_typec: zero out stale pointers
- CVE-2022-50641 HSI: omap_ssi: Fix refcount leak in ssi_probe
- CVE-2022-50640 mmc: core: Fix kernel panic when remove non-standard SDIO card
- CVE-2022-50639 io-wq: Fix memory leak in worker creation
- CVE-2022-50638 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
- CVE-2022-50637 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()
- CVE-2022-50636 PCI: Fix pci_device_is_present() for VFs by checking PF
- CVE-2022-50635 powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()
- CVE-2022-50634 power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe()
- CVE-2022-50633 usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
- CVE-2022-50632 drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init()
- CVE-2022-50631 RISC-V: kexec: Fix memory leak of fdt buffer
- CVE-2022-50630 mm: hugetlb: fix UAF in hugetlb_handle_userfault
- CVE-2022-50629 wifi: rsi: Fix memory leak in rsi_coex_attach()
- CVE-2022-50628 drm/gud: Fix UBSAN warning
- CVE-2022-50627 wifi: ath11k: fix monitor mode bringup crash
- CVE-2022-50626 media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
- CVE-2022-50625 serial: amba-pl011: avoid SBSA UART accessing DMACR register
- CVE-2022-50624 net: netsec: fix error handling in netsec_register_mdio()
- CVE-2022-50623 fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
- CVE-2022-50622 ext4: fix potential memory leak in ext4_fc_record_modified_inode()
- CVE-2022-50621 dm: verity-loadpin: Only trust verity targets with enforcement
- CVE-2022-50620 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
- CVE-2022-50619 drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr()
- CVE-2022-50618 mmc: meson-gx: fix return value check of mmc_add_host()
- CVE-2022-50617 drm/amdgpu/powerplay/psm: Fix memory leak in power state init
- CVE-2022-50616 regulator: core: Use different devices for resource allocation and DT lookup