2022 CVEs (page 24)
Page 24 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35640 | Medium | 4.0 | 2024-07-16 | IBM Sterling Partner Engagement Manager 6.2.2 could allow a local attacker to obtain sensitive information when a detailed technical error message is returned… |
CVE-2022-45449 | Medium | 6.5 | 2024-07-16 | Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows… |
CVE-2022-48866 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-ou… |
CVE-2022-48865 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel panic when enabling bearer When enabling a bearer on a node, a kernel pa… |
CVE-2022-48864 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When control vq rec… |
CVE-2022-48863 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsp_pipeline_build() dsp_pipeline_build() allocates dup pointer… |
CVE-2022-48862 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to erroneous iotlb entries In vhost_iotlb_add_range_ctx(), ran… |
CVE-2022-48861 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vdpa: fix use-after-free on vp_vdpa_remove When vp_vdpa driver is unbind, vp_vdpa is free… |
CVE-2022-48860 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe This node pointer is returned by of_pa… |
CVE-2022-48859 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr Th… |
CVE-2022-48858 | High | 7.0 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warning due to a… |
CVE-2022-48857 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100_send_complete Syzbot reported UAF in port100_… |
CVE-2022-48856 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info The of_find_compatible_node() fun… |
CVE-2022-48855 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot reported a kernel infoleak [1] of 4 byt… |
CVE-2022-48854 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: arc_emac: Fix use after free in arc_mdio_probe() If bus->state is equal to MDIOBUS_A… |
CVE-2022-48853 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMA_FROM_DEVICE The problem I'm addressing was discovered by… |
CVE-2022-48852 | Low | 3.3 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec… |
CVE-2022-48851 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdm_lte_rx() The netif_rx_ni() function frees the… |
CVE-2022-48850 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speed_show When bringing down the net… |
CVE-2022-48849 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bypass tiling flag check in virtual display case (v2) vkms leverages common a… |
CVE-2022-48848 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Do not unregister events twice Nicolas reported that using: # trace-cm… |
CVE-2022-48847 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix filter limit check In watch_queue_set_filter(), there are a couple of pl… |
CVE-2022-48846 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: block: release rq qos structures for queue without disk blkcg_init_queue() may add rq qos… |
CVE-2022-48845 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE (landed… |
CVE-2022-48844 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix leaking sent_cmd skb sent_cmd memory is not freed before freeing… |
CVE-2022-48842 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 ("ice: Avoid RTNL… |
CVE-2022-48841 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() It is possible to do… |
CVE-2022-48840 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix hang during reboot/shutdown Recent commit 974578017fc1 ("iavf: Add waiting so t… |
CVE-2022-48839 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet_recvmsg() syzbot found that when an A… |
CVE-2022-48838 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver The syzbot fuzzer foun… |
CVE-2022-48837 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndis_set_response() If "BufOffset" is ve… |
CVE-2022-48836 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: Input: aiptek - properly check endpoint type Syzbot reported warning in usb_submit_urb()… |
CVE-2022-48835 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Page fault in reply q processing A page fault was encountered in mpt3sas o… |
CVE-2022-48834 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control transfers The syzbot fuzzer reported a… |
CVE-2022-48833 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: btrfs: skip reserved bytes warning on unmount after log cleanup failure After the recent… |
CVE-2022-48832 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: audit: don't deref the syscall args when checking the openat2 open_how::flags As reported… |
CVE-2022-48831 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ima: fix reference leak in asymmetric_verify() Don't leak a reference to the key if its a… |
CVE-2022-48830 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotp_rcv() When receiving a CAN fr… |
CVE-2022-48829 | Critical | 9.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes iattr::ia_size is a loff_t… |
CVE-2022-48828 | Critical | 9.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type. NF… |
CVE-2022-48827 | High | 7.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb901… |
CVE-2022-48826 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix deadlock on DSI device attach error DSI device attach to DSI host will be do… |
CVE-2022-48825 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add stag_work to all the vports Call trace seen when creating NPIV ports, onl… |
CVE-2022-48824 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: myrs: Fix crash in error case In myrs_detect(), cs->disable_intr is NULL when privd… |
CVE-2022-48823 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix refcount issue when LOGO is received during TMF Hung task call trace was… |
CVE-2022-48822 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: usb: f_fs: Fix use-after-free for epfile Consider a case where ffs_func_eps_disable is ca… |
CVE-2022-48821 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput() on failed usercopy If the copy back to userland fails… |
CVE-2022-48820 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() This error path needs to de… |
CVE-2022-48819 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case syzbot found that mixing send… |
CVE-2022-48818 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: don't use devres for mdiobus As explained in commits: 74b6d7d13307 (… |
CVE-2022-48817 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: ar9331: register the mdiobus under devres As explained in commits: 74b6d7d13307… |
CVE-2022-48816 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchro… |
CVE-2022-48815 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: don't use devres for mdiobus As explained in commits: 74b6d7d13307 ("n… |
CVE-2022-48814 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: seville: register the mdiobus under devres As explained in commits: 74b6d7d1330… |
CVE-2022-48813 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: don't use devres for mdiobus As explained in commits: 74b6d7d13307 ("net… |
CVE-2022-48812 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: don't use devres for mdiobus As explained in commits: 74b6d7d1330… |
CVE-2022-48811 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: don't release napi in __ibmvnic_open() If __ibmvnic_open() encounters an error s… |
CVE-2022-48810 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path ip[6]mr_free… |
CVE-2022-48809 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and its metadata When uncloning an skb dst a… |
CVE-2022-48808 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix panic when DSA master device unbinds on shutdown Rafael reports that on a s… |
CVE-2022-48807 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handler is call… |
CVE-2022-48806 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX Commit effa453168a7 ("i2c: i801: D… |
CVE-2022-48805 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup ax88179_rx_fixup() contain… |
CVE-2022-48804 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out… |
CVE-2022-48803 | High | 7.3 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fix missing sentinel for clk_div_table _get_table_maxdiv() tries to access "clk_… |
CVE-2022-48802 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: fs/proc: task_mmu.c: don't read mapcount for migration entry The syzbot reported the belo… |
CVE-2022-48801 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL If we fail to cop… |
CVE-2022-48800 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: remove deadlock due to throttling failing to make progress A soft lockup bug… |
CVE-2022-48799 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_… |
CVE-2022-48798 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: verify the driver availability for path_event call If no driver is attached to… |
CVE-2022-48797 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mm: don't try to NUMA-migrate COW pages that have other uses Oded Gabbay reports that ena… |
CVE-2022-48796 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported the following use aft… |
CVE-2022-48795 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sba_unmap_sg Rolf Eike Beer reported the following bug: [12… |
CVE-2022-48794 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upon error the ieee802154_xmit_complete()… |
CVE-2022-48793 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to r… |
CVE-2022-48792 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task Currently a use-after-free… |
CVE-2022-48791 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sas_task Currently a use-after-free may… |
CVE-2022-48790 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix a possible use-after-free in controller reset during load Unlike .queue_rq, in… |
CVE-2022-48789 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix possible use-after-free in transport error_recovery work While nvme_tcp_sub… |
CVE-2022-48788 | Critical | 9.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport error_recovery work While nvme_rdma_s… |
CVE-2022-48787 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was present at all (or, presumably, all of the… |
CVE-2022-48786 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_co… |
CVE-2022-48785 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago 8965779d2c0e ("ipv6… |
CVE-2022-48784 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the… |
CVE-2022-48783 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_put(priv->ds->slave_… |
CVE-2022-48782 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warnin… |
CVE-2022-48781 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - get rid of alg_memory_allocated alg_memory_allocated does not seem to be… |
CVE-2022-48780 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback function… |
CVE-2022-48779 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will… |
CVE-2022-48778 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_apply_timings() fai… |
CVE-2022-48777 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped parti… |
CVE-2022-48776 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doesn't free pparts wh… |
CVE-2022-48775 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() take… |
CVE-2022-48774 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: Fix the error handling path in pt_core_init() In order to free resource… |
CVE-2022-48773 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If there are failures th… |
CVE-2022-29946 | Medium | 6.3 | 2024-07-11 | NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enf… |
CVE-2022-45147 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP… |
CVE-2022-30636 | High | 7.5 | 2024-07-02 | httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently t… |
CVE-2022-25480 | High | 7.8 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2022-25479 | Medium | 5.5 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |