Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 190 of 437.
- CVE-2022-48951 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
- CVE-2022-48950 perf: Fix perf_pending_task() UaF
- CVE-2022-4895 Man-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer
- CVE-2022-48949 igb: Initialize mailbox message for VF reset
- CVE-2022-48948 usb: gadget: uvc: Prevent buffer overflow in setup handler
- CVE-2022-48947 Bluetooth: L2CAP: Fix u8 overflow
- CVE-2022-48946 udf: Fix preallocation discarding at indirect extent boundary
- CVE-2022-48945 media: vivid: fix compose size exceed boundary
- CVE-2022-48944 sched: Fix yet more sched_fork() races
- CVE-2022-48943 KVM: x86/mmu: make apf token non-zero to fix bug
- CVE-2022-48942 hwmon: Handle failure to register sensor with thermal zone correctly
- CVE-2022-48941 ice: fix concurrent reset and removal of VFs
- CVE-2022-48940 bpf: Fix crash due to incorrect copy_map_value
- CVE-2022-4894 Privilege escalation in HP and Samsung Printer software
- CVE-2022-48939 bpf: Add schedule points in batch ops
- CVE-2022-48938 CDC-NCM: avoid overflow in sanity checking
- CVE-2022-48937 io_uring: add a schedule point in io_add_buffers()
- CVE-2022-48935 netfilter: nf_tables: unregister flowtable hooks on netns exit
- CVE-2022-48934 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
- CVE-2022-48933 netfilter: nf_tables: fix memory leak during stateful obj update
- CVE-2022-48932 net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
- CVE-2022-48931 configfs: fix a race in configfs_{,un}register_subsystem()
- CVE-2022-48930 RDMA/ib_srp: Fix a deadlock
- CVE-2022-48929 bpf: Fix crash due to out of bounds access into reg2btf_ids.
- CVE-2022-48928 iio: adc: men_z188_adc: Fix a resource leak in an error handling path
- CVE-2022-48927 iio: adc: tsc2046: fix memory corruption by preventing array overflow
- CVE-2022-48926 usb: gadget: rndis: add spinlock for rndis response list
- CVE-2022-48925 RDMA/cma: Do not change route.addr.src_addr outside state checks
- CVE-2022-48924 thermal: int340x: fix memory leak in int3400_notify()
- CVE-2022-48923 btrfs: prevent copying too big compressed lzo segment
- CVE-2022-48922 riscv: fix oops caused by irqsoff latency tracer
- CVE-2022-48921 sched/fair: Fix fault in reweight_entity
- CVE-2022-48920 btrfs: get rid of warning on transaction commit when using flushoncommit
- CVE-2022-4892 MyCMS Visitors Module view.php build_view cross site scripting
- CVE-2022-48919 cifs: fix double free race when mount fails in cifs_get_root()
- CVE-2022-48918 iwlwifi: mvm: check debugfs_dir ptr before use
- CVE-2022-48916 iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- CVE-2022-48915 thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
- CVE-2022-48914 xen/netfront: destroy queues before real_num_tx_queues is zeroed
- CVE-2022-48913 blktrace: fix use after free for struct blk_trace
- CVE-2022-48912 netfilter: fix use-after-free in __nf_register_net_hook()
- CVE-2022-48911 netfilter: nf_queue: fix possible use-after-free
- CVE-2022-48910 net: ipv6: ensure we call ipv6_mc_down() at most once
- CVE-2022-4891 Sisimai string.rb to_plain redos
- CVE-2022-48909 net/smc: fix connection leak
- CVE-2022-48908 net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- CVE-2022-48907 auxdisplay: lcd2s: Fix memory leak in ->remove()
- CVE-2022-48906 mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
- CVE-2022-48905 ibmvnic: free reset-work-item when flushing
- CVE-2022-48904 iommu/amd: Fix I/O page table memory leak
- CVE-2022-48903 btrfs: fix relocation crash due to premature return from btrfs_commit_transaction()
- CVE-2022-48902 btrfs: do not WARN_ON() if we have PageError set
- CVE-2022-48901 btrfs: do not start relocation until in progress drops are done
- CVE-2022-4890 abhilash1985 PredictApp Cookie new_framework_defaults_7_0.rb deserialization
- CVE-2022-48899 drm/virtio: Fix GEM handle creation UAF
- CVE-2022-48898 drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- CVE-2022-48897 arm64/mm: fix incorrect file_map_count for invalid pmd
- CVE-2022-48896 ixgbe: fix pci device refcount leak
- CVE-2022-48895 iommu/arm-smmu: Don't unregister on shutdown
- CVE-2022-48894 iommu/arm-smmu-v3: Don't unregister on shutdown
- CVE-2022-48893 drm/i915/gt: Cleanup partial engine discovery failures
- CVE-2022-48892 sched/core: Fix use-after-free bug in dup_user_cpus_ptr()
- CVE-2022-48891 regulator: da9211: Use irq handler when ready
- CVE-2022-48890 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM
- CVE-2022-4889 visegripped Stracker api.php getHistory sql injection
- CVE-2022-48889 ASoC: Intel: sof-nau8825: fix module alias overflow
- CVE-2022-48888 drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path
- CVE-2022-48887 drm/vmwgfx: Remove rcu locks from user resources
- CVE-2022-48886 ice: Add check for kzalloc
- CVE-2022-48885 ice: Fix potential memory leak in ice_gnss_tty_write()
- CVE-2022-48884 net/mlx5: Fix command stats access after free
- CVE-2022-48883 net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent
- CVE-2022-48882 net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)
- CVE-2022-48881 platform/x86/amd: Fix refcount leak in amd_pmc_probe
- CVE-2022-48880 platform/surface: aggregator: Add missing call to ssam_request_sync_free()
- CVE-2022-4888 Multiple Plugins from Addify - Multiple CSRF
- CVE-2022-48879 efi: fix NULL-deref in init error path
- CVE-2022-48878 Bluetooth: hci_qca: Fix driver shutdown on closed serdev
- CVE-2022-48876 wifi: mac80211: fix initialization of rx->link and rx->link_sta
- CVE-2022-48875 wifi: mac80211: sdata can be NULL during AMPDU start
- CVE-2022-48874 misc: fastrpc: Fix use-after-free and race in fastrpc_map_find
- CVE-2022-48873 misc: fastrpc: Don't remove map on creater_process and device_release
- CVE-2022-48872 misc: fastrpc: Fix use-after-free race condition for maps
- CVE-2022-48871 tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- CVE-2022-48870 tty: fix possible null-ptr-defer in spk_ttyio_release
- CVE-2022-48869 USB: gadgetfs: Fix race between mounting and unmounting
- CVE-2022-48868 dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- CVE-2022-48867 dmaengine: idxd: Prevent use after free on completion memory
- CVE-2022-48866 HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
- CVE-2022-48865 tipc: fix kernel panic when enabling bearer
- CVE-2022-48864 vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command
- CVE-2022-48863 mISDN: Fix memory leak in dsp_pipeline_build()
- CVE-2022-48862 vhost: fix hung thread due to erroneous iotlb entries
- CVE-2022-48861 vdpa: fix use-after-free on vp_vdpa_remove
- CVE-2022-48860 ethernet: Fix error handling in xemaclite_of_probe
- CVE-2022-4886 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
- CVE-2022-48859 net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- CVE-2022-48858 net/mlx5: Fix a race on command flush flow
- CVE-2022-48857 NFC: port100: fix use-after-free in port100_send_complete
- CVE-2022-48856 gianfar: ethtool: Fix refcount leak in gfar_get_ts_info