Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 185 of 437.
- CVE-2022-49415 ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe
- CVE-2022-49414 ext4: fix race condition between ext4_write and ext4_convert_inline_data
- CVE-2022-49413 bfq: Update cgroup information before merging bio
- CVE-2022-49412 bfq: Avoid merging queues with different parents
- CVE-2022-49411 bfq: Make sure bfqg for which we are queueing requests is online
- CVE-2022-49410 tracing: Fix potential double free in create_var_ref()
- CVE-2022-4941 WCFM Membership <= 2.9.10 - Cross-Site Request Forgery
- CVE-2022-49409 ext4: fix bug_on in __es_tree_search
- CVE-2022-49408 ext4: fix memory leak in parse_apply_sb_mount_options()
- CVE-2022-49407 dlm: fix plock invalid read
- CVE-2022-49406 block: Fix potential deadlock in blk_ia_range_sysfs_show()
- CVE-2022-49405 staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()
- CVE-2022-49404 RDMA/hfi1: Fix potential integer multiplication overflow errors
- CVE-2022-49403 lib/string_helpers: fix not adding strarray to device's resource list
- CVE-2022-49402 ftrace: Clean up hash direct_functions on register failures
- CVE-2022-49401 mm/page_owner: use strscpy() instead of strlcpy()
- CVE-2022-49400 md: Don't set mddev private to NULL in raid0 pers->free
- CVE-2022-4940 WCFM Membership <= 2.10.0 - Missing Authorization
- CVE-2022-49399 tty: goldfish: Use tty_port_destroy() to destroy port
- CVE-2022-49398 usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback
- CVE-2022-49397 phy: qcom-qmp: fix struct clk leak on probe errors
- CVE-2022-49396 phy: qcom-qmp: fix reset-controller leak on probe errors
- CVE-2022-49395 um: Fix out-of-bounds read in LDT setup
- CVE-2022-49394 blk-iolatency: Fix inflight count imbalances and IO hangs on offline
- CVE-2022-49393 misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl
- CVE-2022-49392 serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe
- CVE-2022-49391 remoteproc: mtk_scp: Fix a potential double free
- CVE-2022-49390 macsec: fix UAF bug for real_dev
- CVE-2022-4939 WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
- CVE-2022-49389 usb: usbip: fix a refcount leak in stub_probe()
- CVE-2022-49388 ubi: ubi_create_volume: Fix use-after-free when volume creation failed
- CVE-2022-49387 watchdog: rzg2l_wdt: Fix 32bit overflow issue
- CVE-2022-49386 net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks
- CVE-2022-49385 driver: base: fix UAF when driver_attach failed
- CVE-2022-49384 md: fix double free of io_acct_set bioset
- CVE-2022-49383 watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context'
- CVE-2022-49382 soc: rockchip: Fix refcount leak in rockchip_grf_init
- CVE-2022-49381 jffs2: fix memory leak in jffs2_do_fill_super
- CVE-2022-49380 f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
- CVE-2022-4938 WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery
- CVE-2022-49379 driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction
- CVE-2022-49378 sfc: fix considering that all channels have TX queues
- CVE-2022-49377 blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
- CVE-2022-49376 scsi: sd: Fix potential NULL pointer dereference
- CVE-2022-49375 rtc: mt6397: check return value after calling platform_get_resource()
- CVE-2022-49374 tipc: check attribute length for bearer name
- CVE-2022-49373 watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
- CVE-2022-49372 tcp: tcp_rtx_synack() can be called from process context
- CVE-2022-49371 driver core: fix deadlock in __device_attach
- CVE-2022-49370 firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
- CVE-2022-4937 Missing authorization in WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible
- CVE-2022-49369 amt: fix possible memory leak in amt_rcv()
- CVE-2022-49368 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
- CVE-2022-49367 net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
- CVE-2022-49366 ksmbd: fix reference count leak in smb_check_perm_dacl()
- CVE-2022-49365 drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()
- CVE-2022-49364 f2fs: fix to clear dirty inode in f2fs_evict_inode()
- CVE-2022-49363 f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
- CVE-2022-49362 NFSD: Fix potential use-after-free in nfsd_file_put()
- CVE-2022-49361 f2fs: fix to do sanity check for inline inode
- CVE-2022-49360 f2fs: fix to do sanity check on total_data_blocks
- CVE-2022-4936 WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery
- CVE-2022-49359 drm/panfrost: Job should reference MMU not file_priv
- CVE-2022-49358 netfilter: nf_tables: memleak flow rule from commit path
- CVE-2022-49357 efi: Do not import certificates from UEFI Secure Boot for T2 Macs
- CVE-2022-49356 SUNRPC: Trap RDMA segment overflows
- CVE-2022-49354 ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
- CVE-2022-49353 powerpc/papr_scm: don't requests stats with '0' sized stats buffer
- CVE-2022-49352 ext4: fix warning in ext4_handle_inode_extension
- CVE-2022-49351 net: altera: Fix refcount leak in altera_tse_mdio_create
- CVE-2022-49350 net: mdio: unexport __init-annotated mdio_bus_init()
- CVE-2022-4935 WCFM Marketplace <= 3.4.11 - Missing Authorization
- CVE-2022-49349 ext4: fix use-after-free in ext4_rename_dir_prepare
- CVE-2022-49348 ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
- CVE-2022-49347 ext4: fix bug_on in ext4_writepages
- CVE-2022-49346 net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
- CVE-2022-49345 net: xfrm: unexport __init-annotated xfrm4_protocol_init()
- CVE-2022-49344 af_unix: Fix a data-race in unix_dgram_peer_wake_me().
- CVE-2022-49343 ext4: avoid cycles in directory h-tree
- CVE-2022-49342 net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register
- CVE-2022-49341 bpf, arm64: Clear prog->jited_len along prog->jited
- CVE-2022-49340 ip_gre: test csum_start instead of transport header
- CVE-2022-4934 Command injection in Sophos Web Appliance
- CVE-2022-49339 net: ipv6: unexport __init-annotated seg6_hmac_init()
- CVE-2022-49338 net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules
- CVE-2022-49337 ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
- CVE-2022-49336 drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
- CVE-2022-49335 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
- CVE-2022-49334 mm/huge_memory: Fix xarray node memory leak
- CVE-2022-49333 net/mlx5: E-Switch, pair only capable devices
- CVE-2022-49332 scsi: lpfc: Address NULL pointer dereference after starget_to_rport()
- CVE-2022-49331 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
- CVE-2022-49330 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
- CVE-2022-4933 ATM Consulting dolibarr_module_quicksupplierprice interface.php upatePrice sql injection
- CVE-2022-49329 vduse: Fix NULL pointer dereference on sysfs access
- CVE-2022-49328 mt76: fix use-after-free by removing a non-RCU wcid pointer
- CVE-2022-49327 bcache: avoid journal no-space deadlock by reserving 1 journal bucket
- CVE-2022-49326 rtl818x: Prevent using not initialized queues
- CVE-2022-49325 tcp: add accessors to read/set tp->snd_cwnd
- CVE-2022-49324 mips: cpc: Fix refcount leak in mips_cpc_default_phys_base