Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 183 of 437.
- CVE-2022-49599 tcp: Fix data-races around sysctl_tcp_l3mdev_accept.
- CVE-2022-49598 tcp: Fix data-races around sysctl_tcp_mtu_probing.
- CVE-2022-49597 tcp: Fix data-races around sysctl_tcp_base_mss.
- CVE-2022-49596 tcp: Fix data-races around sysctl_tcp_min_snd_mss.
- CVE-2022-49595 tcp: Fix a data-race around sysctl_tcp_probe_threshold.
- CVE-2022-49594 tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.
- CVE-2022-49593 tcp: Fix a data-race around sysctl_tcp_probe_interval.
- CVE-2022-49592 net: stmmac: fix dma queue left shift overflow issue
- CVE-2022-49591 net: dsa: microchip: ksz_common: Fix refcount leak bug
- CVE-2022-49590 igmp: Fix data-races around sysctl_igmp_llm_reports.
- CVE-2022-4959 qkmc-rk redbbs Nickname cross site scripting
- CVE-2022-49589 igmp: Fix data-races around sysctl_igmp_qrv.
- CVE-2022-49588 tcp: Fix data-races around sysctl_tcp_migrate_req.
- CVE-2022-49587 tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
- CVE-2022-49586 tcp: Fix data-races around sysctl_tcp_fastopen.
- CVE-2022-49585 tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.
- CVE-2022-49584 ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero
- CVE-2022-49583 iavf: Fix handling of dummy receive descriptors
- CVE-2022-49582 net: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filtering
- CVE-2022-49581 be2net: Fix buffer overflow in be_get_module_eeprom
- CVE-2022-49580 ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.
- CVE-2022-4958 qkmc-rk redbbs Post cross site scripting
- CVE-2022-49579 ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
- CVE-2022-49578 ip: Fix data-races around sysctl_ip_prot_sock.
- CVE-2022-49577 udp: Fix a data-race around sysctl_udp_l3mdev_accept.
- CVE-2022-49576 ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.
- CVE-2022-49575 tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
- CVE-2022-49574 tcp: Fix data-races around sysctl_tcp_recovery.
- CVE-2022-49573 tcp: Fix a data-race around sysctl_tcp_early_retrans.
- CVE-2022-49572 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
- CVE-2022-49571 tcp: Fix data-races around sysctl_tcp_max_reordering.
- CVE-2022-49570 gpio: gpio-xilinx: Fix integer overflow
- CVE-2022-4957 librespeed speedtest stats.php cross site scripting
- CVE-2022-49569 spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers
- CVE-2022-49568 KVM: Don't null dereference ops->destroy
- CVE-2022-49567 mm/mempolicy: fix uninit-value in mpol_rebind_policy()
- CVE-2022-49566 crypto: qat - fix memory leak in RSA
- CVE-2022-49565 perf/x86/intel/lbr: Fix unchecked MSR access error on HSW
- CVE-2022-49564 crypto: qat - add param check for DH
- CVE-2022-49563 crypto: qat - add param check for RSA
- CVE-2022-49562 KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits
- CVE-2022-49561 netfilter: conntrack: re-fetch conntrack after insertion
- CVE-2022-49560 exfat: check if cluster num is valid
- CVE-2022-4956 Caphyon Advanced Installer WinSxS DLL uncontrolled search path
- CVE-2022-49559 KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2
- CVE-2022-49558 netfilter: nf_tables: double hook unregistration in netns path
- CVE-2022-49557 x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)
- CVE-2022-49556 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak
- CVE-2022-49555 Bluetooth: hci_qca: Use del_timer_sync() before freeing
- CVE-2022-49554 zsmalloc: fix races between asynchronous zspage free and page migration
- CVE-2022-49553 fs/ntfs3: validate BOOT sectors_per_clusters
- CVE-2022-49552 bpf: Fix combination of jit blinding and pointers to bpf subprogs.
- CVE-2022-49551 usb: isp1760: Fix out-of-bounds array access
- CVE-2022-49550 fs/ntfs3: provide block_invalidate_folio to fix memory leak
- CVE-2022-4955 Security feature bypass in Chrome
- CVE-2022-49549 x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails
- CVE-2022-49548 bpf: Fix potential array overflow in bpf_trampoline_get_progs()
- CVE-2022-49547 btrfs: fix deadlock between concurrent dio writes when low on free data space
- CVE-2022-49546 x86/kexec: fix memory leak of elf header buffer
- CVE-2022-49545 ALSA: usb-audio: Cancel pending work at closing a MIDI substream
- CVE-2022-49544 ipw2x00: Fix potential NULL dereference in libipw_xmit()
- CVE-2022-49543 ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
- CVE-2022-49542 scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()
- CVE-2022-49541 cifs: fix potential double free during failed mount
- CVE-2022-49540 rcu-tasks: Fix race in schedule and flush work
- CVE-2022-4954 Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting
- CVE-2022-49539 rtw89: ser: fix CAM leaks occurring in L2 reset
- CVE-2022-49538 ALSA: jack: Access input_dev under mutex
- CVE-2022-49537 scsi: lpfc: Fix call trace observed during I/O with CMF enabled
- CVE-2022-49536 scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock
- CVE-2022-49535 scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- CVE-2022-49534 scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT
- CVE-2022-49533 ath11k: Change max no of active probe SSID and BSSID to fw capability
- CVE-2022-49532 drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
- CVE-2022-49531 loop: implement ->free_disk
- CVE-2022-49530 drm/amd/pm: fix double free in si_parse_power_table()
- CVE-2022-4953 Elementor < 3.5.5 - Iframe Injection
- CVE-2022-49529 drm/amdgpu/pm: fix the null pointer while the smu is disabled
- CVE-2022-49528 media: i2c: dw9714: Disable the regulator when the driver fails to probe
- CVE-2022-49527 media: venus: hfi: avoid null dereference in deinit
- CVE-2022-49526 md/bitmap: don't set sb values if can't pass sanity check
- CVE-2022-49525 media: cx25821: Fix the warning when removing the module
- CVE-2022-49524 media: pci: cx23885: Fix the error handling in cx23885_initdev()
- CVE-2022-49523 ath11k: disable spectral scan during spectral deinit
- CVE-2022-49522 mmc: jz4740: Apply DMA engine limits to maximum segment size
- CVE-2022-49521 scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
- CVE-2022-49520 arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
- CVE-2022-4952 Denial of service in csharp-language-server-protocol
- CVE-2022-49519 ath10k: skip ath10k_halt during suspend for driver state RESTARTING
- CVE-2022-49518 ASoC: SOF: ipc3-topology: Correct get_control_data for non bytes payload
- CVE-2022-49517 ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
- CVE-2022-49516 ice: always check VF VSI pointer values
- CVE-2022-49515 ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t
- CVE-2022-49514 ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
- CVE-2022-49513 cpufreq: governor: Use kobject release() method to free dbs_data
- CVE-2022-49512 mtd: rawnand: denali: Use managed device resources
- CVE-2022-49511 fbdev: defio: fix the pagelist corruption
- CVE-2022-49510 drm/omap: fix NULL but dereferenced coccicheck error
- CVE-2022-49509 media: i2c: max9286: fix kernel oops when removing module
- CVE-2022-49508 HID: elan: Fix potential double free in elan_input_configured