Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 191 of 437.
- CVE-2022-48855 sctp: fix kernel-infoleak for SCTP sockets
- CVE-2022-48854 net: arc_emac: Fix use after free in arc_mdio_probe()
- CVE-2022-48853 Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
- CVE-2022-48852 drm/vc4: hdmi: Unregister codec device on unbind
- CVE-2022-48851 staging: gdm724x: fix use after free in gdm_lte_rx()
- CVE-2022-48850 net-sysfs: add check for netdevice being present to speed_show
- CVE-2022-4885 sviehb jefferson path traversal
- CVE-2022-48849 drm/amdgpu: bypass tiling flag check in virtual display case (v2)
- CVE-2022-48848 tracing/osnoise: Do not unregister events twice
- CVE-2022-48847 watch_queue: Fix filter limit check
- CVE-2022-48846 block: release rq qos structures for queue without disk
- CVE-2022-48845 MIPS: smp: fill in sibling and core maps earlier
- CVE-2022-48844 Bluetooth: hci_core: Fix leaking sent_cmd skb
- CVE-2022-48842 ice: Fix race condition during interface enslave
- CVE-2022-48841 ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()
- CVE-2022-48840 iavf: Fix hang during reboot/shutdown
- CVE-2022-4884 Path-Traversal in MKP storing
- CVE-2022-48839 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- CVE-2022-48838 usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- CVE-2022-48837 usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- CVE-2022-48836 Input: aiptek - properly check endpoint type
- CVE-2022-48835 scsi: mpt3sas: Page fault in reply q processing
- CVE-2022-48834 usb: usbtmc: Fix bug in pipe direction for control transfers
- CVE-2022-48833 btrfs: skip reserved bytes warning on unmount after log cleanup failure
- CVE-2022-48832 audit: don't deref the syscall args when checking the openat2 open_how::flags
- CVE-2022-48831 ima: fix reference leak in asymmetric_verify()
- CVE-2022-48830 can: isotp: fix potential CAN frame reception race in isotp_rcv()
- CVE-2022-4883 Other in libXpm
- CVE-2022-48829 NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
- CVE-2022-48828 NFSD: Fix ia_size underflow
- CVE-2022-48827 NFSD: Fix the behavior of READ near OFFSET_MAX
- CVE-2022-48826 drm/vc4: Fix deadlock on DSI device attach error
- CVE-2022-48825 scsi: qedf: Add stag_work to all the vports
- CVE-2022-48824 scsi: myrs: Fix crash in error case
- CVE-2022-48823 scsi: qedf: Fix refcount issue when LOGO is received during TMF
- CVE-2022-48822 usb: f_fs: Fix use-after-free for epfile
- CVE-2022-48821 misc: fastrpc: avoid double fput() on failed usercopy
- CVE-2022-48820 phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
- CVE-2022-4882 kaltura mwEmbed Share Plugin share.js cross site scripting
- CVE-2022-48819 tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case
- CVE-2022-48818 net: dsa: mv88e6xxx: don't use devres for mdiobus
- CVE-2022-48817 net: dsa: ar9331: register the mdiobus under devres
- CVE-2022-48816 SUNRPC: lock against ->sock changing during sysfs read
- CVE-2022-48815 net: dsa: bcm_sf2: don't use devres for mdiobus
- CVE-2022-48814 net: dsa: seville: register the mdiobus under devres
- CVE-2022-48813 net: dsa: felix: don't use devres for mdiobus
- CVE-2022-48812 net: dsa: lantiq_gswip: don't use devres for mdiobus
- CVE-2022-48811 ibmvnic: don't release napi in __ibmvnic_open()
- CVE-2022-48810 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
- CVE-2022-4881 CapsAdmin PAC3 http.lua cross site scripting
- CVE-2022-48809 net: fix a memleak when uncloning an skb dst and its metadata
- CVE-2022-48808 net: dsa: fix panic when DSA master device unbinds on shutdown
- CVE-2022-48807 ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler
- CVE-2022-48806 eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
- CVE-2022-48805 net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
- CVE-2022-48804 vt_ioctl: fix array_index_nospec in vt_setactivate
- CVE-2022-48803 phy: ti: Fix missing sentinel for clk_div_table
- CVE-2022-48802 fs/proc: task_mmu.c: don't read mapcount for migration entry
- CVE-2022-48801 iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL
- CVE-2022-48800 mm: vmscan: remove deadlock due to throttling failing to make progress
- CVE-2022-4880 stakira OpenUtau ZIP Archive VoicebankInstaller.cs VoicebankInstaller path traversal
- CVE-2022-48799 perf: Fix list corruption in perf_cgroup_switch()
- CVE-2022-48798 s390/cio: verify the driver availability for path_event call
- CVE-2022-48797 mm: don't try to NUMA-migrate COW pages that have other uses
- CVE-2022-48796 iommu: Fix potential use-after-free during probe
- CVE-2022-48795 parisc: Fix data TLB miss in sba_unmap_sg
- CVE-2022-48794 net: ieee802154: at86rf230: Stop leaking skb's
- CVE-2022-48793 KVM: x86: nSVM: fix potential NULL derefernce on nested migration
- CVE-2022-48792 scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
- CVE-2022-48791 scsi: pm8001: Fix use-after-free for aborted TMF sas_task
- CVE-2022-48790 nvme: fix a possible use-after-free in controller reset during load
- CVE-2022-4879 Forged Alliance Forever Vote improper authorization
- CVE-2022-48789 nvme-tcp: fix possible use-after-free in transport error_recovery work
- CVE-2022-48788 nvme-rdma: fix possible use-after-free in transport error_recovery work
- CVE-2022-48787 iwlwifi: fix use-after-free
- CVE-2022-48786 vsock: remove vsock from connected table when connect is interrupted by a signal
- CVE-2022-48785 ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
- CVE-2022-48784 cfg80211: fix race in netlink owner interface destruction
- CVE-2022-48783 net: dsa: lantiq_gswip: fix use after free in gswip_remove()
- CVE-2022-48782 mctp: fix use after free
- CVE-2022-48781 crypto: af_alg - get rid of alg_memory_allocated
- CVE-2022-48780 net/smc: Avoid overwriting the copies of clcsock callback functions
- CVE-2022-4878 JATOS ZIP ZipUtil.java ZipUtil path traversal
- CVE-2022-48779 net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
- CVE-2022-48778 mtd: rawnand: gpmi: don't leak PM reference in error path
- CVE-2022-48777 mtd: parsers: qcom: Fix kernel panic on skipped partition
- CVE-2022-48776 mtd: parsers: qcom: Fix missing free for pparts in cleanup
- CVE-2022-48775 Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
- CVE-2022-48774 dmaengine: ptdma: Fix the error handling path in pt_core_init()
- CVE-2022-48773 xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
- CVE-2022-48772 media: lgdt3306a: Add a check against null-pointer-def
- CVE-2022-48771 drm/vmwgfx: Fix stale file descriptors on failed usercopy
- CVE-2022-48770 bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
- CVE-2022-4877 snoyberg keter Proxy.hs cross site scripting
- CVE-2022-48769 efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
- CVE-2022-48768 tracing/histogram: Fix a potential memory leak for kstrdup()
- CVE-2022-48767 ceph: properly put ceph_string reference after async create attempt
- CVE-2022-48766 drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.
- CVE-2022-48765 KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- CVE-2022-48764 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}