Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 186 of 437.
- CVE-2022-49323 iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()
- CVE-2022-49322 tracing: Fix sleeping function called from invalid context on RT kernel
- CVE-2022-49321 xprtrdma: treat all calls not a bcall when bc_serv is NULL
- CVE-2022-49320 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
- CVE-2022-4932 Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
- CVE-2022-49319 iommu/arm-smmu-v3: check return value after calling platform_get_resource()
- CVE-2022-49318 f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
- CVE-2022-49317 f2fs: avoid infinite loop to flush node pages
- CVE-2022-49316 NFSv4: Don't hold the layoutget locks across multiple RPC calls
- CVE-2022-49315 drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
- CVE-2022-49314 tty: Fix a possible resource leak in icom_probe
- CVE-2022-49313 drivers: usb: host: Fix deadlock in oxu_bus_suspend()
- CVE-2022-49312 staging: rtl8712: fix a potential memory leak in r871xu_drv_init()
- CVE-2022-49311 drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()
- CVE-2022-49310 char: xillybus: fix a refcount leak in cleanup_dev()
- CVE-2022-4931 Missing authorization in BackUpWordPress
- CVE-2022-49309 drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- CVE-2022-49308 extcon: Modify extcon device to be created after driver data is set
- CVE-2022-49307 tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
- CVE-2022-49306 usb: dwc3: host: Stop setting the ACPI companion
- CVE-2022-49305 drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
- CVE-2022-49304 drivers: tty: serial: Fix deadlock in sa1100_set_termios()
- CVE-2022-49303 drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle
- CVE-2022-49302 USB: host: isp116x: check return value after calling platform_get_resource()
- CVE-2022-49301 staging: rtl8712: fix uninit-value in usb_read8() and friends
- CVE-2022-49300 nbd: fix race between nbd_alloc_config() and module removal
- CVE-2022-4930 nuxsmin sysPass URL cross site scripting
- CVE-2022-49298 staging: rtl8712: fix uninit-value in r871xu_drv_init()
- CVE-2022-49297 nbd: fix io hung while disconnecting device
- CVE-2022-49296 ceph: fix possible deadlock when holding Fwb to get inline_data
- CVE-2022-49295 nbd: call genl_unregister_family() first in nbd_cleanup()
- CVE-2022-49294 drm/amd/display: Check if modulo is 0 before dividing.
- CVE-2022-49293 netfilter: nf_tables: initialize registers in nft_do_chain()
- CVE-2022-49292 ALSA: oss: Fix PCM OSS buffer allocation overflow
- CVE-2022-49291 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
- CVE-2022-49290 mac80211: fix potential double free on mesh join
- CVE-2022-4929 icplayer tts-utils.js cross site scripting
- CVE-2022-49289 uaccess: fix integer overflow on access_ok()
- CVE-2022-49288 ALSA: pcm: Fix races among concurrent prealloc proc writes
- CVE-2022-49287 tpm: fix reference counting for struct tpm_chip
- CVE-2022-49286 tpm: use try_get_ops() in tpm-space.c
- CVE-2022-49285 iio: accel: mma8452: use the correct logic to get mma8452_data
- CVE-2022-49284 coresight: syscfg: Fix memleak on registration failure in cscfg_create_device
- CVE-2022-49283 firmware: sysfb: fix platform-device leak in error path
- CVE-2022-49282 f2fs: quota: fix loop condition at f2fs_quota_sync()
- CVE-2022-49281 cifs: fix handlecache and multiuser
- CVE-2022-49280 NFSD: prevent underflow in nfssvc_decode_writeargs()
- CVE-2022-4928 icplayer presenter.js AddonText_Selection_create cross site scripting
- CVE-2022-49279 NFSD: prevent integer overflow on 32 bit systems
- CVE-2022-49278 remoteproc: Fix count check in rproc_coredump_write()
- CVE-2022-49277 jffs2: fix memory leak in jffs2_do_mount_fs
- CVE-2022-49276 jffs2: fix memory leak in jffs2_scan_medium
- CVE-2022-49275 can: m_can: m_can_tx_handler(): fix use after free of skb
- CVE-2022-49274 ocfs2: fix crash when mount with quota enabled
- CVE-2022-49273 rtc: pl031: fix rtc features null pointer dereference
- CVE-2022-49272 ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
- CVE-2022-49271 cifs: prevent bad output lengths in smb2_ioctl_query_info()
- CVE-2022-49270 dm: fix use-after-free in dm_cleanup_zoned_dev()
- CVE-2022-4927 ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing
- CVE-2022-49269 can: isotp: sanitize CAN ID checks in isotp_bind()
- CVE-2022-49268 ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
- CVE-2022-49266 block: fix rq-qos breakage from skipping rq_qos_done_bio()
- CVE-2022-49265 PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove()
- CVE-2022-49264 exec: Force single empty string when argv is empty
- CVE-2022-49263 brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
- CVE-2022-49262 crypto: octeontx2 - remove CONFIG_DM_CRYPT check
- CVE-2022-49261 drm/i915/gem: add missing boundary check in vm_access
- CVE-2022-49260 crypto: hisilicon/sec - fix the aead software fallback for engine
- CVE-2022-4926 Security feature bypass in Chrome
- CVE-2022-49259 block: don't delete queue kobject before its children
- CVE-2022-49258 crypto: ccree - Fix use after free in cc_cipher_exit()
- CVE-2022-49257 watch_queue: Fix NULL dereference in error cleanup
- CVE-2022-49256 watch_queue: Actually free the watch
- CVE-2022-49255 f2fs: fix missing free nid in f2fs_handle_failed_inode
- CVE-2022-49254 media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()
- CVE-2022-49253 media: usb: go7007: s2250-board: fix leak in probe()
- CVE-2022-49252 ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type
- CVE-2022-49251 ASoC: codecs: va-macro: fix accessing array out of bounds for enum type
- CVE-2022-49250 ASoC: codecs: rx-macro: fix accessing compander for aux
- CVE-2022-4925 Other in Chrome
- CVE-2022-49249 ASoC: codecs: wc938x: fix accessing array out of bounds for enum type
- CVE-2022-49248 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
- CVE-2022-49247 media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
- CVE-2022-49246 ASoC: atmel: Fix error handling in snd_proto_probe
- CVE-2022-49245 ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume
- CVE-2022-49244 ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe
- CVE-2022-49243 ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
- CVE-2022-49242 ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
- CVE-2022-49241 ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe
- CVE-2022-49240 ASoC: mediatek: mt8195: Fix error handling in mt8195_mt6359_rt1019_rt5682_dev_probe
- CVE-2022-4924 Use after free in Chrome
- CVE-2022-49239 ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data
- CVE-2022-49238 ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855
- CVE-2022-49237 ath11k: add missing of_node_put() to avoid leak
- CVE-2022-49236 bpf: Fix UAF due to race between btf_try_get_module and load_module
- CVE-2022-49235 ath9k_htc: fix uninit value bugs
- CVE-2022-49234 net: dsa: Avoid cross-chip syncing of VLAN filtering
- CVE-2022-49233 drm/amd/display: Call dc_stream_release for remove link enc assignment
- CVE-2022-49232 drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
- CVE-2022-49231 rtw88: fix memory overrun and memory leak during hw_scan