Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 184 of 437.
- CVE-2022-49507 regulator: da9121: Fix uninit-value in da9121_assign_chip_model()
- CVE-2022-49506 drm/mediatek: Add vblank register/unregister callback functions
- CVE-2022-49505 NFC: NULL out the dev->rfkill to prevent UAF
- CVE-2022-49504 scsi: lpfc: Inhibit aborts if external loopback plug is inserted
- CVE-2022-49503 ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
- CVE-2022-49502 media: rga: fix possible memory leak in rga_probe
- CVE-2022-49501 usbnet: Run unregister_netdev() before unbind() again
- CVE-2022-49500 wl1251: dynamically allocate memory used for DMA
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation
- CVE-2022-49499 drm/msm: Fix null pointer dereferences without iommu
- CVE-2022-49498 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it
- CVE-2022-49497 net: remove two BUG() from skb_checksum_help()
- CVE-2022-49496 media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko
- CVE-2022-49495 drm/msm/hdmi: check return value after calling platform_get_resource_byname()
- CVE-2022-49494 mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()
- CVE-2022-49493 ASoC: rt5645: Fix errorenous cleanup order
- CVE-2022-49492 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
- CVE-2022-49491 drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
- CVE-2022-49490 drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
- CVE-2022-4949 AdSanity < 1.8.2 - Authenticated Arbitrary File Upload
- CVE-2022-49489 drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
- CVE-2022-49488 drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
- CVE-2022-49487 mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()
- CVE-2022-49486 ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
- CVE-2022-49485 drm/v3d: Fix null pointer dereference of pointer perfmon
- CVE-2022-49484 mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector
- CVE-2022-49483 drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit
- CVE-2022-49482 ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
- CVE-2022-49481 regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
- CVE-2022-49480 ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe
- CVE-2022-4948 FlyingPress <= 3.9.6 - Missing Authorization
- CVE-2022-49479 mt76: fix tx status related use-after-free race on station removal
- CVE-2022-49478 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
- CVE-2022-49477 ASoC: samsung: Fix refcount leak in aries_audio_probe
- CVE-2022-49476 mt76: mt7921: fix kernel crash at mt7921_pci_remove
- CVE-2022-49475 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()
- CVE-2022-49474 Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
- CVE-2022-49473 ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*
- CVE-2022-49472 net: phy: micrel: Allow probing without .driver_data
- CVE-2022-49471 rtw89: cfo: check mac_id to avoid out-of-bounds
- CVE-2022-49470 Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- CVE-2022-49469 btrfs: fix anon_dev leak in create_subvol()
- CVE-2022-49468 thermal/core: Fix memory leak in __thermal_cooling_device_register()
- CVE-2022-49467 drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
- CVE-2022-49466 regulator: scmi: Fix refcount leak in scmi_regulator_probe
- CVE-2022-49465 blk-throttle: Set BIO_THROTTLED when bio has been throttled
- CVE-2022-49464 erofs: fix buffer copy overflow of ztailpacking feature
- CVE-2022-49463 thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe
- CVE-2022-49462 drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
- CVE-2022-49461 amt: fix memory leak for advertisement message
- CVE-2022-49460 PM / devfreq: rk3399_dmc: Disable edev on remove()
- CVE-2022-4946 Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect
- CVE-2022-49459 thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
- CVE-2022-49458 drm/msm: don't free the IRQ if it was not requested
- CVE-2022-49457 ARM: versatile: Add missing of_node_put in dcscb_init
- CVE-2022-49456 bonding: fix missed rcu protection
- CVE-2022-49455 misc: ocxl: fix possible double free in ocxl_file_register_afu
- CVE-2022-49454 PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()
- CVE-2022-49453 soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc
- CVE-2022-49452 dpaa2-eth: retrieve the virtual address before dma_unmap
- CVE-2022-49451 firmware: arm_scmi: Fix list protocols enumeration in the base protocol
- CVE-2022-49450 rxrpc: Fix listen() setting the bar too high for the prealloc rings
- CVE-2022-4945 CVE-2022-4945
- CVE-2022-49449 pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()
- CVE-2022-49448 soc: bcm: Check for NULL return of devm_kzalloc()
- CVE-2022-49447 ARM: hisi: Add missing of_node_put after of_find_compatible_node
- CVE-2022-49446 nvdimm: Fix firmware activation deadlock scenarios
- CVE-2022-49445 pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()
- CVE-2022-49444 module: fix [e_shstrndx].sh_size=0 OOB access
- CVE-2022-49443 list: fix a data-race around ep->rdllist
- CVE-2022-49442 drivers/base/node.c: fix compaction sysfs file leak
- CVE-2022-49441 tty: fix deadlock caused by calling printk() under tty_port->lock
- CVE-2022-49440 powerpc/rtas: Keep MSR[RI] set when calling RTAS
- CVE-2022-4944 kalcaddle KodExplorer cross-site request forgery
- CVE-2022-49439 powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
- CVE-2022-49438 Input: sparcspkr - fix refcount leak in bbc_beep_probe
- CVE-2022-49437 powerpc/xive: Fix refcount leak in xive_spapr_init
- CVE-2022-49436 powerpc/papr_scm: Fix leaking nvdimm_events_map elements
- CVE-2022-49435 mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
- CVE-2022-49434 PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
- CVE-2022-49433 RDMA/hfi1: Prevent use of lock before it is initialized
- CVE-2022-49432 powerpc/xics: fix refcount leak in icp_opal_init()
- CVE-2022-49431 powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
- CVE-2022-49430 Input: gpio-keys - cancel delayed work only in case of GPIO
- CVE-2022-4943 miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change
- CVE-2022-49429 RDMA/hfi1: Prevent panic when SDMA is disabled
- CVE-2022-49428 f2fs: fix to do sanity check on inline_dots inode
- CVE-2022-49427 iommu/mediatek: Remove clk_disable in mtk_iommu_remove
- CVE-2022-49426 iommu/arm-smmu-v3-sva: Fix mm use-after-free
- CVE-2022-49425 f2fs: fix dereference of stale list iterator after loop body
- CVE-2022-49424 iommu/mediatek: Fix NULL pointer dereference when printing dev_name
- CVE-2022-49423 rtla: Avoid record NULL pointer dereference
- CVE-2022-49422 dmaengine: idxd: Fix the error handling path in idxd_cdev_register()
- CVE-2022-49421 video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
- CVE-2022-49420 net: annotate races around sk->sk_bound_dev_if
- CVE-2022-4942 mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting
- CVE-2022-49419 video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup
- CVE-2022-49418 NFSv4: Fix free of uninitialized nfs4_label on referral lookup.
- CVE-2022-49417 iwlwifi: mei: fix potential NULL-ptr deref
- CVE-2022-49416 wifi: mac80211: fix use-after-free in chanctx code