Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 187 of 437.
- CVE-2022-49230 mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta
- CVE-2022-4923 Security feature bypass in Chrome
- CVE-2022-49229 ptp: unregister virtual clocks when unregistering physical clock.
- CVE-2022-49228 bpf: Fix a btf decl_tag bug when tagging a function
- CVE-2022-49227 igc: avoid kernel warning when changing RX ring parameters
- CVE-2022-49226 net: asix: add proper error handling of usb read errors
- CVE-2022-49225 mt76: mt7921s: fix a possible memory leak in mt7921_load_patch
- CVE-2022-49224 power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
- CVE-2022-49223 cxl/port: Hold port reference until decoder release
- CVE-2022-49222 drm/bridge: anx7625: Fix overflow issue on reading EDID
- CVE-2022-49221 drm/msm/dp: populate connector of struct dp_panel
- CVE-2022-49220 dax: make sure inodes are flushed before destroy cache
- CVE-2022-4922 Other in Chrome
- CVE-2022-49219 vfio/pci: fix memory leak during D3hot to D0 transition
- CVE-2022-49218 drm/dp: Fix OOB read when handling Post Cursor2 register
- CVE-2022-49217 scsi: pm8001: Fix abort all task initialization
- CVE-2022-49216 drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
- CVE-2022-49215 xsk: Fix race at socket teardown
- CVE-2022-49214 powerpc/64s: Don't use DSISR for SLB faults
- CVE-2022-49213 ath10k: Fix error handling in ath10k_setup_msa_resources
- CVE-2022-49212 mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
- CVE-2022-49211 mips: cdmm: Fix refcount leak in mips_cdmm_phys_base
- CVE-2022-49210 MIPS: pgalloc: fix memory leak caused by pgd_free()
- CVE-2022-4921 Use after free in Chrome
- CVE-2022-49209 bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
- CVE-2022-49208 RDMA/irdma: Prevent some integer underflows
- CVE-2022-49207 bpf, sockmap: Fix memleak in sk_psock_queue_msg
- CVE-2022-49206 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
- CVE-2022-49205 bpf, sockmap: Fix double uncharge the mem of sk_msg
- CVE-2022-49204 bpf, sockmap: Fix more uncharged while msg has more_data
- CVE-2022-49203 drm/amd/display: Fix double free during GPU reset on DC streams
- CVE-2022-49202 Bluetooth: hci_uart: add missing NULL check in h5_enqueue
- CVE-2022-49201 ibmvnic: fix race between xmit and reset
- CVE-2022-49200 Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
- CVE-2022-4920 Memory corruption in Chrome
- CVE-2022-49199 RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
- CVE-2022-49198 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb
- CVE-2022-49197 af_netlink: Fix shift out of bounds in group mask calculation
- CVE-2022-49196 powerpc/pseries: Fix use after free in remove_phb_dynamic()
- CVE-2022-49195 net: dsa: fix panic on shutdown if multi-chip tree failed to probe
- CVE-2022-49194 net: bcmgenet: Use stronger register read/writes to assure ordering
- CVE-2022-49193 ice: fix 'scheduling while atomic' on aux critical err interrupt
- CVE-2022-49192 drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool
- CVE-2022-49191 mxser: fix xmit_buf leak in activate when LSR == 0xff
- CVE-2022-49190 kernel/resource: fix kfree() of bootmem memory again
- CVE-2022-4919 Use after free in Chrome
- CVE-2022-49189 clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
- CVE-2022-49188 remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region
- CVE-2022-49187 clk: Fix clk_hw_get_clk() when dev is NULL
- CVE-2022-49186 clk: visconti: prevent array overflow in visconti_clk_register_gates()
- CVE-2022-49185 pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
- CVE-2022-49184 net: sparx5: switchdev: fix possible NULL pointer dereference
- CVE-2022-49183 net/sched: act_ct: fix ref leak when switching zones
- CVE-2022-49182 net: hns3: add vlan list lock to protect vlan list
- CVE-2022-49180 LSM: general protection fault in legacy_parse_param
- CVE-2022-4918 Use after free in Chrome
- CVE-2022-49179 block, bfq: don't move oom_bfqq
- CVE-2022-49178 memstick/mspro_block: fix handling of read-only devices
- CVE-2022-49177 hwrng: cavium - fix NULL but dereferenced coccicheck error
- CVE-2022-49176 bfq: fix use-after-free in bfq_dispatch_request
- CVE-2022-49175 PM: core: keep irq flags in device_pm_check_callbacks()
- CVE-2022-49174 ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
- CVE-2022-49173 spi: fsi: Implement a timeout for polling status
- CVE-2022-49172 parisc: Fix non-access data TLB cache flush faults
- CVE-2022-49171 ext4: don't BUG if someone dirty pages without asking ext4 first
- CVE-2022-49170 f2fs: fix to do sanity check on curseg->alloc_type
- CVE-2022-4917 Security feature bypass in Chrome
- CVE-2022-49169 f2fs: use spin_lock to avoid hang
- CVE-2022-49168 btrfs: do not clean up repair bio if submit fails
- CVE-2022-49167 btrfs: do not double complete bio on errors during compressed reads
- CVE-2022-49166 ntfs: add sanity check on allocation size
- CVE-2022-49165 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
- CVE-2022-49164 powerpc/tm: Fix more userspace r13 corruption
- CVE-2022-49163 media: imx-jpeg: fix a bug of accessing array out of bounds
- CVE-2022-49162 video: fbdev: sm712fb: Fix crash in smtcfb_write()
- CVE-2022-49161 ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe
- CVE-2022-49160 scsi: qla2xxx: Fix crash during module load unload test
- CVE-2022-4916 Use after free in Chrome
- CVE-2022-49159 scsi: qla2xxx: Implement ref count for SRB
- CVE-2022-49158 scsi: qla2xxx: Fix warning message due to adisc being flushed
- CVE-2022-49157 scsi: qla2xxx: Fix premature hw access after PCI error
- CVE-2022-49156 scsi: qla2xxx: Fix scheduling while atomic
- CVE-2022-49155 scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- CVE-2022-49154 KVM: SVM: fix panic on out-of-bounds guest IRQ
- CVE-2022-49153 wireguard: socket: free skb in send6 when ipv6 is disabled
- CVE-2022-49152 XArray: Fix xas_create_range() when multi-order entry present
- CVE-2022-49151 can: mcba_usb: properly check endpoint type
- CVE-2022-49150 rtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sram
- CVE-2022-4915 Other in Chrome
- CVE-2022-49149 rxrpc: Fix call timer start racing with call destruction
- CVE-2022-49148 watch_queue: Free the page array when watch_queue is dismantled
- CVE-2022-49147 block: Fix the maximum minor value is blk_alloc_ext_minor()
- CVE-2022-49146 virtio: use virtio_device_ready() in virtio_device_restore()
- CVE-2022-49145 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
- CVE-2022-49144 io_uring: fix memory leak of uid in files registration
- CVE-2022-49142 net: preserve skb_end_offset() in skb_unclone_keeptruesize()
- CVE-2022-49141 net: dsa: felix: fix possible NULL pointer dereference
- CVE-2022-4914 Memory corruption in Chrome
- CVE-2022-49139 Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
- CVE-2022-49138 Bluetooth: hci_event: Ignore multiple conn complete events