Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 192 of 437.
- CVE-2022-48763 KVM: x86: Forcibly leave nested virt when SMM state is toggled
- CVE-2022-48762 arm64: extable: fix load_unaligned_zeropad() reg indices
- CVE-2022-48761 usb: xhci-plat: fix crash when suspend if remote wake enable
- CVE-2022-48760 USB: core: Fix hang in usb_kill_urb by adding memory barriers
- CVE-2022-4876 Kaltura mwEmbed DefaultSettings.php cross site scripting
- CVE-2022-48759 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- CVE-2022-48758 scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- CVE-2022-48757 net: fix information leakage in /proc/net/ptype
- CVE-2022-48756 drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- CVE-2022-48755 powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
- CVE-2022-48754 phylib: fix potential use-after-free
- CVE-2022-48753 block: fix memory leak in disk_register_independent_access_ranges
- CVE-2022-48752 powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending
- CVE-2022-48751 net/smc: Transitional solution for clcsock race issue
- CVE-2022-48750 hwmon: (nct6775) Fix crash in clear_caseopen
- CVE-2022-4875 fossology cross site scripting
- CVE-2022-48749 drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
- CVE-2022-48748 net: bridge: vlan: fix memory leak in __allowed_ingress
- CVE-2022-48747 block: Fix wrong offset in bio_truncate()
- CVE-2022-48746 net/mlx5e: Fix handling of wrong devices during bond netevent
- CVE-2022-48745 net/mlx5: Use del_timer_sync in fw reset flow of halting poll
- CVE-2022-48744 net/mlx5e: Avoid field-overflowing memcpy()
- CVE-2022-48743 net: amd-xgbe: Fix skb data length underflow
- CVE-2022-48742 rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- CVE-2022-48741 ovl: fix NULL pointer dereference in copy up warning
- CVE-2022-48740 selinux: fix double free of cond_list on error paths
- CVE-2022-4874 Auth bypass in NF20
- CVE-2022-48739 ASoC: hdmi-codec: Fix OOB memory accesses
- CVE-2022-48738 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- CVE-2022-48735 ALSA: hda: Fix UAF of leds class devs at unbinding
- CVE-2022-48734 btrfs: fix deadlock between quota disable and qgroup rescan worker
- CVE-2022-48733 btrfs: fix use-after-free after failure to create a snapshot
- CVE-2022-48732 drm/nouveau: fix off by one in BIOS boundary checking
- CVE-2022-48731 mm/kmemleak: avoid scanning potential huge holes
- CVE-2022-48730 dma-buf: heaps: Fix potential spectre v1 gadget
- CVE-2022-4873 Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902
- CVE-2022-48729 IB/hfi1: Fix panic with larger ipoib send_queue_size
- CVE-2022-48728 IB/hfi1: Fix AIP early init panic
- CVE-2022-48727 KVM: arm64: Avoid consuming a stale esr value when SError occur
- CVE-2022-48726 RDMA/ucma: Protect mc during concurrent multicast leaves
- CVE-2022-48725 RDMA/siw: Fix refcounting leak in siw_create_qp()
- CVE-2022-48724 iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- CVE-2022-48723 spi: uniphier: fix reference count leak in uniphier_spi_probe()
- CVE-2022-48722 net: ieee802154: ca8210: Stop leaking skb's
- CVE-2022-48721 net/smc: Forward wakeup to smc socket waitqueue after fallback
- CVE-2022-48720 net: macsec: Fix offload support for NETDEV_UNREGISTER event
- CVE-2022-4872 WooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'
- CVE-2022-48719 net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
- CVE-2022-48718 drm: mxsfb: Fix NULL pointer dereference
- CVE-2022-48717 ASoC: max9759: fix underflow in speaker_gain_control_put()
- CVE-2022-48716 ASoC: codecs: wcd938x: fix incorrect used of portid
- CVE-2022-48715 scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- CVE-2022-48714 bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
- CVE-2022-48713 perf/x86/intel/pt: Fix crash with stop filters in single-range mode
- CVE-2022-48712 ext4: fix error handling in ext4_fc_record_modified_inode()
- CVE-2022-48711 tipc: improve size validations for received domain records
- CVE-2022-48710 drm/radeon: fix a possible null pointer dereference
- CVE-2022-4871 ummmmm nflpick-em.com LoadUsers.php _Load_Users sql injection
- CVE-2022-48709 ice: switch: fix potential memleak in ice_add_adv_recipe()
- CVE-2022-48708 pinctrl: single: fix potential NULL dereference
- CVE-2022-48707 cxl/region: Fix null pointer dereference for resetting decoder
- CVE-2022-48706 vdpa: ifcvf: Do proper cleanup if IFCVF init fails
- CVE-2022-48705 wifi: mt76: mt7921e: fix crash in chip reset fail
- CVE-2022-48704 drm/radeon: add a force flush to delay work when radeon
- CVE-2022-48703 thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- CVE-2022-48702 ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- CVE-2022-48701 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- CVE-2022-4870 Information disclosure in Octopus Server
- CVE-2022-48699 sched/debug: fix dentry leak in update_sched_domain_debugfs
- CVE-2022-48698 drm/amd/display: fix memory leak when using debugfs_lookup()
- CVE-2022-48697 nvmet: fix a use-after-free
- CVE-2022-48696 regmap: spi: Reserve space for register address/padding
- CVE-2022-48695 scsi: mpt3sas: Fix use-after-free warning
- CVE-2022-48694 RDMA/irdma: Fix drain SQ hang with no completion
- CVE-2022-48693 soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- CVE-2022-48692 RDMA/srp: Set scmnd->result only when scmnd is not NULL
- CVE-2022-48691 netfilter: nf_tables: clean up hook list when offload flags check fails
- CVE-2022-48690 ice: Fix DMA mappings leak
- CVE-2022-4869 Evolution Events Artaxerxes POST Parameter middleware.py information disclosure
- CVE-2022-48689 tcp: TX zerocopy should not sense pfmemalloc status
- CVE-2022-48688 i40e: Fix kernel crash during module removal
- CVE-2022-48687 ipv6: sr: fix out-of-bounds read when setting HMAC data.
- CVE-2022-48686 nvme-tcp: fix UAF when detecting digest errors
- CVE-2022-48685 Privilege escalation in logpoint:siem
- CVE-2022-48684 Code injection in logpoint:siem
- CVE-2022-48683 Security feature bypass in macOS
- CVE-2022-48682 In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
- CVE-2022-48681 Memory corruption in EGRT-00
- CVE-2022-4868 Improper Authorization in froxlor/froxlor
- CVE-2022-48675 IB/core: Fix a nested dead lock as part of ODP flow
- CVE-2022-48674 erofs: fix pcluster use-after-free on UP platforms
- CVE-2022-48673 net/smc: Fix possible access to freed memory in link clear
- CVE-2022-48672 of: fdt: fix off-by-one error in unflatten_dt_nodes()
- CVE-2022-48671 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- CVE-2022-48670 peci: cpu: Fix use-after-free in adev_release()
- CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor
- CVE-2022-48669 powerpc/pseries: Fix potential memleak in papr_get_attr()
- CVE-2022-48668 smb3: fix temporary data corruption in collapse range
- CVE-2022-48667 smb3: fix temporary data corruption in insert range
- CVE-2022-48666 scsi: core: Fix a use-after-free