Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 176 of 437.
- CVE-2022-50287 drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs
- CVE-2022-50286 ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
- CVE-2022-50285 mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
- CVE-2022-50284 ipc: fix memory leak in init_mqueue_fs()
- CVE-2022-50283 mtd: core: add missing of_node_get() in dynamic partitions code
- CVE-2022-50282 chardev: fix error handling in cdev_device_add()
- CVE-2022-50281 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
- CVE-2022-50280 pnode: terminate at peers of source
- CVE-2022-50279 wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()
- CVE-2022-50278 PNP: fix name memory leak in pnp_alloc_dev()
- CVE-2022-50277 ext4: don't allow journal inode to have encrypt flag
- CVE-2022-50276 power: supply: fix null pointer dereferencing in power_supply_get_battery_info
- CVE-2022-50275 drm/radeon: Add the missed acpi_put_table() to fix memory leak
- CVE-2022-50274 media: dvbdev: adopts refcnt to avoid UAF
- CVE-2022-50273 f2fs: fix to do sanity check on destination blkaddr during recovery
- CVE-2022-50272 media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- CVE-2022-50271 vhost/vsock: Use kvmalloc/kvfree for larger packets.
- CVE-2022-50270 f2fs: fix the assign logic of iocb
- CVE-2022-50269 drm/vkms: Fix memory leak in vkms_init()
- CVE-2022-50268 mmc: moxart: fix return value check of mmc_add_host()
- CVE-2022-50267 mmc: rtsx_pci: fix return value check of mmc_add_host()
- CVE-2022-50266 kprobes: Fix check for probe enabled in kill_kprobe()
- CVE-2022-50265 kcm: annotate data-races around kcm->rx_wait
- CVE-2022-50264 clk: socfpga: Fix memory leak in socfpga_gate_init()
- CVE-2022-50263 vdpasim: fix memory leak when freeing IOTLBs
- CVE-2022-50262 fs/ntfs3: Validate BOOT record_size
- CVE-2022-50261 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
- CVE-2022-50260 drm/msm: Make .remove and .shutdown HW shutdown consistent
- CVE-2022-50259 bpf, sockmap: fix race in sock_map_free()
- CVE-2022-50258 wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
- CVE-2022-50257 xen/gntdev: Prevent leaking grants
- CVE-2022-50256 drm/meson: remove drm bridges at aggregate driver unbind time
- CVE-2022-50255 tracing: Fix reading strings from synthetic events
- CVE-2022-50254 media: ov8865: Fix an error handling path in ov8865_probe()
- CVE-2022-50253 bpf: make sure skb->len != 0 when redirecting to a tunneling device
- CVE-2022-50252 igb: Do not free q_vector unless new one was allocated
- CVE-2022-50251 mmc: vub300: fix return value check of mmc_add_host()
- CVE-2022-50250 regulator: core: fix use_count leakage when handling boot-on
- CVE-2022-50249 memory: of: Fix refcount leak bug in of_get_ddr_timings()
- CVE-2022-50248 wifi: iwlwifi: mvm: fix double free on tx path.
- CVE-2022-50247 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq
- CVE-2022-50246 usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
- CVE-2022-50245 rapidio: fix possible UAF when kfifo_alloc() fails
- CVE-2022-50244 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
- CVE-2022-50243 sctp: handle the error returned from sctp_auth_asoc_init_active_key
- CVE-2022-50242 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
- CVE-2022-50241 NFSD: fix use-after-free on source server when doing inter-server copy
- CVE-2022-50240 android: binder: stop saving a pointer to the VMA
- CVE-2022-50239 cpufreq: qcom: fix writes in read-only memory region
- CVE-2022-50238 Security feature bypass in Windows
- CVE-2022-50237 `ed25519-dalek` Double Public Key Signing Function Oracle Attack
- CVE-2022-50236 iommu/mediatek: Fix crash on isr after kexec()
- CVE-2022-50235 NFSD: Protect against send buffer overflow in NFSv2 READDIR
- CVE-2022-50234 io_uring/af_unix: defer registered files gc to io_uring release
- CVE-2022-50233 Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
- CVE-2022-50232 arm64: set UXN on swapper page tables
- CVE-2022-50231 crypto: arm64/poly1305 - fix a read out-of-bound
- CVE-2022-50230 arm64: set UXN on swapper page tables
- CVE-2022-50229 ALSA: bcd2000: Fix a UAF bug on the error path of probing
- CVE-2022-50228 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
- CVE-2022-50227 KVM: x86/xen: Initialize Xen timer only once
- CVE-2022-50226 crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak
- CVE-2022-50225 riscv:uprobe fix SR_SPIE set/clear handling
- CVE-2022-50224 KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- CVE-2022-50223 LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- CVE-2022-50222 tty: vt: initialize unicode screen buffer
- CVE-2022-50221 drm/fb-helper: Fix out-of-bounds access
- CVE-2022-50220 usbnet: Fix linkwatch use-after-free on disconnect
- CVE-2022-50219 bpf: Fix KASAN use-after-free Read in compute_effective_progs
- CVE-2022-50218 iio: light: isl29028: Fix the warning in isl29028_remove()
- CVE-2022-50217 fuse: write inode in fuse_release()
- CVE-2022-50215 scsi: sg: Allow waiting for commands to complete on removed device
- CVE-2022-50214 coresight: Clear the connection field properly
- CVE-2022-50213 netfilter: nf_tables: do not allow SET_ID to refer to another table
- CVE-2022-50212 netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
- CVE-2022-50211 md-raid10: fix KASAN warning
- CVE-2022-50210 MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- CVE-2022-50209 meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
- CVE-2022-50208 soc: amlogic: Fix refcount leak in meson-secure-pwrc.c
- CVE-2022-50207 ARM: bcm: Fix refcount leak in bcm_kona_smc_init
- CVE-2022-50206 arm64: fix oops in concurrently setting insn_emulation sysctls
- CVE-2022-50205 ext2: Add more validity checks for inode counts
- CVE-2022-50204 ARM: OMAP2+: pdata-quirks: Fix refcount leak bug
- CVE-2022-50203 ARM: OMAP2+: display: Fix refcount leak bug
- CVE-2022-50202 PM: hibernate: defer device probing when resuming from hibernation
- CVE-2022-50201 selinux: fix memleak in security_read_state_kernel()
- CVE-2022-50200 selinux: Add boundary check in put_entry()
- CVE-2022-50199 ARM: OMAP2+: Fix refcount leak in omapdss_init_of
- CVE-2022-50198 ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
- CVE-2022-50197 cpufreq: zynq: Fix refcount leak in zynq_get_revision
- CVE-2022-50196 soc: qcom: ocmem: Fix refcount leak in of_get_ocmem
- CVE-2022-50195 ARM: dts: qcom: replace gcc PXO with pxo_board fixed clock
- CVE-2022-50194 soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register
- CVE-2022-50193 erofs: wake up all waiters after z_erofs_lzma_head ready
- CVE-2022-50192 spi: tegra20-slink: fix UAF in tegra_slink_remove()
- CVE-2022-50191 regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
- CVE-2022-50190 spi: Fix simplification of devm_spi_register_controller
- CVE-2022-50189 tools/power turbostat: Fix file pointer leak
- CVE-2022-50188 drm/meson: Fix refcount leak in meson_encoder_hdmi_init
- CVE-2022-50187 ath11k: fix netdev open race