Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 181 of 437.
- CVE-2022-4979 Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS
- CVE-2022-49789 scsi: zfcp: Fix double free of FSF request when qdio send fails
- CVE-2022-49788 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
- CVE-2022-49787 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
- CVE-2022-49786 blk-cgroup: properly pin the parent in blkcg_css_online
- CVE-2022-49785 x86/sgx: Add overflow check in sgx_validate_offset_length()
- CVE-2022-49784 perf/x86/amd/uncore: Fix memory leak for events array
- CVE-2022-49783 x86/fpu: Drop fpregs lock before inheriting FPU permissions
- CVE-2022-49782 perf: Improve missing SIGTRAP checking
- CVE-2022-49781 perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling
- CVE-2022-49780 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
- CVE-2022-4978 Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE
- CVE-2022-49779 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
- CVE-2022-49778 arm64/mm: fix incorrect file_map_count for non-leaf pmd/pud
- CVE-2022-49777 Input: i8042 - fix leaking of platform device on module removal
- CVE-2022-49776 macvlan: enforce a consistent minimal mtu
- CVE-2022-49775 tcp: cdg: allow tcp_cdg_release() to be called multiple times
- CVE-2022-49774 KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
- CVE-2022-49773 drm/amd/display: Fix optc2_configure warning on dcn314
- CVE-2022-49772 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
- CVE-2022-49771 dm ioctl: fix misbehavior if list_versions races with module loading
- CVE-2022-49770 ceph: avoid putting the realm twice when decoding snaps fails
- CVE-2022-49769 gfs2: Check sb_bsize_shift after reading superblock
- CVE-2022-49768 9p: trans_fd/p9_conn_cancel: drop client lock earlier
- CVE-2022-49767 9p/trans_fd: always use O_NONBLOCK read/write
- CVE-2022-49766 netlink: Bounds-check struct nlmsgerr creation
- CVE-2022-49765 net/9p: use a dedicated spinlock for trans_fd
- CVE-2022-49764 bpf: Prevent bpf program recursion for raw tracepoint probes
- CVE-2022-49763 ntfs: fix use-after-free in ntfs_attr_find()
- CVE-2022-49762 ntfs: check overflow when iterating ATTR_RECORDs
- CVE-2022-49761 btrfs: always report error in run_one_delayed_ref()
- CVE-2022-49760 mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()
- CVE-2022-4976 Memory corruption in Archive::Unzip::Burst
- CVE-2022-49759 VMCI: Use threaded irqs instead of tasklets
- CVE-2022-49758 reset: uniphier-glue: Fix possible null-ptr-deref
- CVE-2022-49757 EDAC/highbank: Fix memory leak in highbank_mc_probe()
- CVE-2022-49756 phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()
- CVE-2022-49755 usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- CVE-2022-49754 Bluetooth: Fix a buffer overflow in mgmt_mesh_add()
- CVE-2022-49753 dmaengine: Fix double increment of client_count in dma_chan_get()
- CVE-2022-49752 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()
- CVE-2022-49751 w1: fix WARNING after calling w1_process()
- CVE-2022-49750 cpufreq: CPPC: Add u64 casts to avoid overflowing
- CVE-2022-4975 Rhacs: cross-site scripting in portal
- CVE-2022-49749 i2c: designware: use casting of u64 in clock multiplication to avoid overflow
- CVE-2022-49748 perf/x86/amd: fix potential integer overflow on shift of a int
- CVE-2022-49747 erofs/zmap.c: Fix incorrect offset calculation
- CVE-2022-49746 dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
- CVE-2022-49745 fpga: m10bmc-sec: Fix probe rollback
- CVE-2022-49744 mm/uffd: fix pte marker when fork() without fork event
- CVE-2022-49743 ovl: Use "buf" flexible array for memcpy() destination
- CVE-2022-49742 f2fs: initialize locks earlier in f2fs_fill_super()
- CVE-2022-49741 fbdev: smscufx: fix error handling code in ufx_usb_probe
- CVE-2022-49740 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks
- CVE-2022-49739 gfs2: Always check inode size of inline inodes
- CVE-2022-49738 f2fs: fix to do sanity check on i_extra_isize in is_alive()
- CVE-2022-49737 Race condition in X server
- CVE-2022-49733 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
- CVE-2022-49732 sock: redo the psock vs ULP protection check
- CVE-2022-49731 ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
- CVE-2022-4973 WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function
- CVE-2022-49729 nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
- CVE-2022-49728 ipv6: Fix signed integer overflow in __ip6_append_data
- CVE-2022-49727 ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
- CVE-2022-49726 clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()
- CVE-2022-49725 i40e: Fix call trace in setup_tx_descriptors
- CVE-2022-49724 tty: goldfish: Fix free_irq() on remove
- CVE-2022-49723 drm/i915/reset: Fix error_state_read ptr + offset use
- CVE-2022-49722 ice: Fix memory corruption in VF driver
- CVE-2022-49721 arm64: ftrace: consistently handle PLTs.
- CVE-2022-49720 block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
- CVE-2022-4972 Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
- CVE-2022-49719 irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
- CVE-2022-49718 irqchip/apple-aic: Fix refcount leak in aic_of_ic_init
- CVE-2022-49717 irqchip/apple-aic: Fix refcount leak in build_fiq_affinity
- CVE-2022-49716 irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions
- CVE-2022-49715 irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
- CVE-2022-49714 irqchip/realtek-rtl: Fix refcount leak in map_interrupts
- CVE-2022-49713 usb: dwc2: Fix memory leak in dwc2_hcd_init
- CVE-2022-49712 usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
- CVE-2022-49711 bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- CVE-2022-49710 dm mirror log: round up region bitmap size to BITS_PER_LONG
- CVE-2022-4971 Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting
- CVE-2022-49709 cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle
- CVE-2022-49708 ext4: fix bug_on ext4_mb_use_inode_pa
- CVE-2022-49707 ext4: add reserved GDT blocks check
- CVE-2022-49706 zonefs: fix zonefs_iomap_begin() for reads
- CVE-2022-49705 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl
- CVE-2022-49704 9p: fix fid refcount leak in v9fs_vfs_get_link
- CVE-2022-49703 scsi: ibmvfc: Store vhost pointer during subcrq allocation
- CVE-2022-49702 btrfs: fix hang during unmount when block group reclaim task is running
- CVE-2022-49701 scsi: ibmvfc: Allocate/free queue resource only during probe/remove
- CVE-2022-49700 mm/slub: add missing TID updates on slab deactivation
- CVE-2022-49699 filemap: Handle sibling entries in filemap_get_read_batch()
- CVE-2022-49698 netfilter: use get_random_u32 instead of prandom
- CVE-2022-49697 bpf: Fix request_sock leak in sk lookup helpers
- CVE-2022-49696 tipc: fix use-after-free Read in tipc_named_reinit
- CVE-2022-49695 igb: fix a use-after-free issue in igb_clean_tx_ring
- CVE-2022-49694 block: disable the elevator int del_gendisk