Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 180 of 437.
- CVE-2022-49883 KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format
- CVE-2022-49882 KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
- CVE-2022-49881 wifi: cfg80211: fix memory leak in query_regdb_file()
- CVE-2022-49880 ext4: fix warning in 'ext4_da_release_space'
- CVE-2022-4988 Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries
- CVE-2022-49879 ext4: fix BUG_ON() when directory entry has invalid rec_len
- CVE-2022-49878 bpf, verifier: Fix memory leak in array reallocation for stack state
- CVE-2022-49877 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
- CVE-2022-49876 wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit()
- CVE-2022-49875 bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
- CVE-2022-49874 HID: hyperv: fix possible memory leak in mousevsc_probe()
- CVE-2022-49873 bpf: Fix wrong reg type conversion in release_reference()
- CVE-2022-49872 net: gso: fix panic on frag_list with mixed head alloc types
- CVE-2022-49871 net: tun: Fix memory leaks of napi_get_frags
- CVE-2022-49870 capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
- CVE-2022-4987 Hirschmann Industrial HiVision External Application Path Hijacking Leading to Arbitrary Code Execution
- CVE-2022-49869 bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
- CVE-2022-49868 phy: ralink: mt7621-pci: add sentinel to quirks table
- CVE-2022-49867 net: wwan: iosm: fix memory leak in ipc_wwan_dellink
- CVE-2022-49866 net: wwan: mhi: fix memory leak in mhi_mbim_dellink
- CVE-2022-49865 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
- CVE-2022-49864 drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram()
- CVE-2022-49863 can: af_can: fix NULL pointer dereference in can_rx_register()
- CVE-2022-49862 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
- CVE-2022-49861 dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
- CVE-2022-49860 dmaengine: ti: k3-udma-glue: fix memory leak when register device fail
- CVE-2022-4986 Hirschmann EagleSDV Denial of Service via TLS
- CVE-2022-49859 net: lapbether: fix issue of invalid opcode in lapbeth_open()
- CVE-2022-49858 octeontx2-pf: Fix SQE threshold checking
- CVE-2022-49857 net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
- CVE-2022-49855 net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg
- CVE-2022-49854 mctp: Fix an error handling path in mctp_init()
- CVE-2022-49853 net: macvlan: fix memory leaks of macvlan_common_newlink
- CVE-2022-49852 riscv: process: fix kernel info leakage
- CVE-2022-49851 riscv: fix reserved memory setup
- CVE-2022-49850 nilfs2: fix deadlock in nilfs_count_free_blocks()
- CVE-2022-4985 Vodafone H500s WiFi Password Disclosure via activation.json
- CVE-2022-49849 btrfs: fix match incorrectly in dev_args_match_device
- CVE-2022-49848 phy: qcom-qmp-combo: fix NULL-deref on runtime resume
- CVE-2022-49847 net: ethernet: ti: am65-cpsw: Fix segmentation fault at module unload
- CVE-2022-49846 udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
- CVE-2022-49845 can: j1939: j1939_send_one(): fix missing CAN header initialization
- CVE-2022-49844 can: dev: fix skb drop check
- CVE-2022-49842 ASoC: core: Fix use-after-free in snd_soc_exit()
- CVE-2022-49841 serial: imx: Add missing .thaw_noirq hook
- CVE-2022-49840 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
- CVE-2022-4984 ZenTao Biz < 6.5, Max < 3.0, & Open Source Edition 16.5/16.5beta1 SQL Injection via user-login.html
- CVE-2022-49839 scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
- CVE-2022-49838 sctp: clear out_curr if all frag chunks of current msg are pruned
- CVE-2022-49837 bpf: Fix memory leaks in __check_func_call
- CVE-2022-49836 siox: fix possible memory leak in siox_device_add()
- CVE-2022-49835 ALSA: hda: fix potential memleak in 'add_widget_node'
- CVE-2022-49834 nilfs2: fix use-after-free bug of ns_writer on remount
- CVE-2022-49833 btrfs: zoned: clone zoned device info when cloning a device
- CVE-2022-49832 pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
- CVE-2022-49831 btrfs: zoned: initialize device's zone info for seeding
- CVE-2022-49830 drm/drv: Fix potential memory leak in drm_dev_init()
- CVE-2022-4983 TEC-IT TBarCode SDK 11.15 Remote File Create
- CVE-2022-49829 drm/scheduler: fix fence ref counting
- CVE-2022-49828 hugetlbfs: don't delete error page from pagecache
- CVE-2022-49827 drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker()
- CVE-2022-49826 ata: libata-transport: fix double ata_host_put() in ata_tport_add()
- CVE-2022-49825 ata: libata-transport: fix error handling in ata_tport_add()
- CVE-2022-49824 ata: libata-transport: fix error handling in ata_tlink_add()
- CVE-2022-49823 ata: libata-transport: fix error handling in ata_tdev_add()
- CVE-2022-49822 cifs: Fix connections leak when tlink setup failed
- CVE-2022-49821 mISDN: fix possible memory leak in mISDN_dsp_element_register()
- CVE-2022-49820 mctp i2c: don't count unused / invalid keys for flow release
- CVE-2022-4982 DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI
- CVE-2022-49819 octeon_ep: fix potential memory leak in octep_device_setup()
- CVE-2022-49818 mISDN: fix misuse of put_device() in mISDN_register_device()
- CVE-2022-49817 net: mhi: Fix memory leak in mhi_net_dellink()
- CVE-2022-49815 erofs: fix missing xas_retry() in fscache mode
- CVE-2022-49814 kcm: close race conditions on sk_receive_queue
- CVE-2022-49813 net: ena: Fix error handling in ena_init()
- CVE-2022-49812 bridge: switchdev: Fix memory leaks when changing VLAN protocol
- CVE-2022-49811 drbd: use after free in drbd_create_device()
- CVE-2022-49810 netfs: Fix missing xas_retry() calls in xarray iteration
- CVE-2022-4981 DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
- CVE-2022-49809 net/x25: Fix skb leak in x25_lapb_receive_frame()
- CVE-2022-49808 net: dsa: don't leak tagger-owned storage on switch driver unbind
- CVE-2022-49807 nvmet: fix a memory leak in nvmet_auth_set_key
- CVE-2022-49806 net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start()
- CVE-2022-49805 net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init()
- CVE-2022-49804 s390: avoid using global register for current_stack_pointer
- CVE-2022-49803 netdevsim: Fix memory leak of nsim_dev->fa_cookie
- CVE-2022-49802 ftrace: Fix null pointer dereference in ftrace_add_mod()
- CVE-2022-49801 tracing: Fix memory leak in tracing_read_pipe()
- CVE-2022-49800 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()
- CVE-2022-4980 Auth bypass in Crypto Application Server (CAS)
- CVE-2022-49799 tracing: Fix wild-memory-access in register_synth_event()
- CVE-2022-49798 tracing: Fix race where eprobes can be called before the event
- CVE-2022-49797 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()
- CVE-2022-49796 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()
- CVE-2022-49795 rethook: fix a potential memleak in rethook_alloc()
- CVE-2022-49794 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
- CVE-2022-49793 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
- CVE-2022-49792 iio: adc: mp2629: fix potential array out of bound access
- CVE-2022-49791 io_uring: fix multishot accept request leaks
- CVE-2022-49790 Input: iforce - invert valid length check when fetching device IDs