Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 179 of 437.
- CVE-2022-49978 fbdev: fb_pm2fb: Avoid potential divide by zero error
- CVE-2022-49977 ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
- CVE-2022-49976 platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS
- CVE-2022-49975 bpf: Don't redirect packets with invalid pkt_len
- CVE-2022-49974 HID: nintendo: fix rumble worker null pointer deref
- CVE-2022-49973 skmsg: Fix wrong last sg check in sk_msg_recvmsg()
- CVE-2022-49972 xsk: Fix corrupted packets for XDP_SHARED_UMEM
- CVE-2022-49971 drm/amd/pm: Fix a potential gpu_metrics_table memory leak
- CVE-2022-49970 bpf, cgroup: Fix kernel BUG in purge_effective_progs
- CVE-2022-4997 JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Token
- CVE-2022-49969 drm/amd/display: clear optc underflow before turn off odm clock
- CVE-2022-49968 ieee802154/adf7242: defer destroy_workqueue call
- CVE-2022-49967 bpf: Fix a data-race around bpf_jit_limit.
- CVE-2022-49966 drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
- CVE-2022-49965 drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asics
- CVE-2022-49964 arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
- CVE-2022-49963 drm/i915/ttm: fix CCS handling
- CVE-2022-49962 xhci: Fix null pointer dereference in remove if xHC has only one roothub
- CVE-2022-49961 bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- CVE-2022-49960 drm/i915: fix null pointer dereference
- CVE-2022-4996 mruby bigint.c udiv floating point comparison with incorrect operator
- CVE-2022-49959 openvswitch: fix memory leak at failed datapath creation
- CVE-2022-49958 net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- CVE-2022-49957 kcm: fix strp_init() order and cleanup
- CVE-2022-49956 staging: rtl8712: fix use after free bugs
- CVE-2022-49955 powerpc/rtas: Fix RTAS MSR[HV] handling for Cell
- CVE-2022-49954 Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- CVE-2022-49953 iio: light: cm3605: Fix an error handling path in cm3605_probe()
- CVE-2022-49952 misc: fastrpc: fix memory corruption on probe
- CVE-2022-49951 firmware_loader: Fix use-after-free during unregister
- CVE-2022-49950 misc: fastrpc: fix memory corruption on open
- CVE-2022-4995 Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
- CVE-2022-49949 firmware_loader: Fix memory leak in firmware upload
- CVE-2022-49948 vt: Clear selection before changing the font
- CVE-2022-49947 binder: fix alloc->vma_vm_mm null-ptr dereference
- CVE-2022-49946 clk: bcm: rpi: Prevent out-of-bounds access
- CVE-2022-49945 hwmon: (gpio-fan) Fix array out of bounds access
- CVE-2022-49944 Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"
- CVE-2022-49943 USB: gadget: Fix obscure lockdep violation for udc_mutex
- CVE-2022-49942 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- CVE-2022-49940 tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
- CVE-2022-4994 KVM: x86: wean fast IN from emulator_pio_in
- CVE-2022-49939 binder: fix UAF of ref->proc caused by race condition
- CVE-2022-49938 cifs: fix small mempool leak in SMB2_negotiate()
- CVE-2022-49937 media: mceusb: Use new usb_control_msg_*() routines
- CVE-2022-49936 USB: core: Prevent nested device-reset calls
- CVE-2022-49935 dma-buf/dma-resv: check if the new fence is really later
- CVE-2022-49934 wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- CVE-2022-49932 KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace
- CVE-2022-49931 IB/hfi1: Correctly move list in sc_disable()
- CVE-2022-49930 RDMA/hns: Fix NULL pointer problem in free_mr_init()
- CVE-2022-4993 HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions a
- CVE-2022-49929 RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
- CVE-2022-49928 SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
- CVE-2022-49927 nfs4: Fix kmemleak when allocate slot failed
- CVE-2022-49926 net: dsa: Fix possible memory leaks in dsa_loop_init()
- CVE-2022-49925 RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
- CVE-2022-49924 nfc: fdp: Fix potential memory leak in fdp_nci_send()
- CVE-2022-49923 nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
- CVE-2022-49922 nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
- CVE-2022-49921 net: sched: Fix use after free in red_enqueue()
- CVE-2022-49920 netfilter: nf_tables: netlink notifier might race to release objects
- CVE-2022-4992 Dräger Infinity M540 VG4.1.1 Spoofed Network Message Handling DoS/Tampering
- CVE-2022-49919 netfilter: nf_tables: release flow rule object from commit path
- CVE-2022-49918 ipvs: fix WARNING in __ip_vs_cleanup_batch()
- CVE-2022-49917 ipvs: fix WARNING in ip_vs_app_net_cleanup()
- CVE-2022-49916 rose: Fix NULL pointer dereference in rose_send_frame()
- CVE-2022-49915 mISDN: fix possible memory leak in mISDN_register_device()
- CVE-2022-49914 btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
- CVE-2022-49913 btrfs: fix inode list leak during backref walking at find_parent_nodes()
- CVE-2022-49912 btrfs: fix ulist leaks in error paths of qgroup self tests
- CVE-2022-49911 netfilter: ipset: enforce documented limit to prevent allocating huge memory
- CVE-2022-49910 Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
- CVE-2022-4991 Tychon is vulnerable to privilege escalation due to OPENSSLDIR location
- CVE-2022-49908 Bluetooth: L2CAP: Fix memory leak in vhci_write
- CVE-2022-49907 net: mdio: fix undefined behavior in bit shift for __mdiobus_register
- CVE-2022-49906 ibmvnic: Free rwi on reset success
- CVE-2022-49905 net/smc: Fix possible leaked pernet namespace in smc_init()
- CVE-2022-49904 net, neigh: Fix null-ptr-deref in neigh_table_clear()
- CVE-2022-49903 ipv6: fix WARNING in ip6_route_net_exit_late()
- CVE-2022-49902 block: Fix possible memory leak for rq_wb on add_disk failure
- CVE-2022-49901 blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- CVE-2022-49900 i2c: piix4: Fix adapter not be removed in piix4_remove()
- CVE-2022-4990 Privilege escalation in AI Suite 3
- CVE-2022-49899 fscrypt: stop using keyrings subsystem for fscrypt_master_key
- CVE-2022-49898 btrfs: fix tree mod log mishandling of reallocated nodes
- CVE-2022-49896 cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak
- CVE-2022-49895 cxl/region: Fix decoder allocation crash
- CVE-2022-49894 cxl/region: Fix region HPA ordering validation
- CVE-2022-49893 cxl/region: Fix cxl_region leak, cleanup targets at region delete
- CVE-2022-49892 ftrace: Fix use-after-free for dynamic ftrace_ops
- CVE-2022-49891 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
- CVE-2022-49890 capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
- CVE-2022-4989 Privilege escalation in AI Suite 3
- CVE-2022-49889 ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters()
- CVE-2022-49888 arm64: entry: avoid kprobe recursion
- CVE-2022-49887 media: meson: vdec: fix possible refcount leak in vdec_probe()
- CVE-2022-49886 x86/tdx: Panic on bad configs that #VE on "private" memory access
- CVE-2022-49885 ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
- CVE-2022-49884 KVM: Initialize gfn_to_pfn_cache locks in dedicated helper