CVEs published February 26, 2025
790 CVEs were published on February 26, 2025: 27 critical, 185 high.
- Published
- 790
- Critical
- 27
- High
- 185
- Medium
- 335
- Low
- 1
- Unrated
- 242
- Now in CISA KEV
- 0
- Fix available
- 97
Most affected products
- Linux
- 706
- Cisco Application Policy Infrastructure Controller
- 4
- Canon Generic PCL6 V4 Printer Driver · Canon Generic UFR… +1
- 3
- mautic/core
- 3
- Cisco NX-OS Software
- 2
- Beckman Coulter Life Sciences MET ONE 3400+
- 1
- BeyondTrust Privilege Management for Windows
- 1
- Brainstorm Force SureMembers
- 1
- CalendApp
- 1
- Countdown Timer for Elementor
- 1
Critical 27
- CVE-2024-47051Remote Code Execution & File Deletion in Asset Uploadsmautic/core
- CVE-2022-49561netfilter: conntrack: re-fetch conntrack after insertionLinux
- CVE-2022-49418NFSv4: Fix free of uninitialized nfs4_label on referral lookup.Linux
- CVE-2022-49407dlm: fix plock invalid readLinux
- CVE-2022-49362NFSD: Fix potential use-after-free in nfsd_file_put()Linux
- CVE-2022-49356SUNRPC: Trap RDMA segment overflowsLinux
- CVE-2022-49280NFSD: prevent underflow in nfssvc_decode_writeargs()Linux
- CVE-2022-49260crypto: hisilicon/sec - fix the aead software fallback for engineLinux
- CVE-2022-49201ibmvnic: fix race between xmit and resetLinux
- CVE-2022-49194net: bcmgenet: Use stronger register read/writes to assure orderingLinux
- CVE-2022-49149rxrpc: Fix call timer start racing with call destructionLinux
- CVE-2022-49094net/tls: fix slab-out-of-bounds bug in decrypt_internalLinux
- CVE-2022-49093skbuff: fix coalescing for page_pool fragment recyclingLinux
- CVE-2022-49058cifs: potential buffer overflow in handling symlinksLinux
- CVE-2024-50685SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationS
- CVE-2024-50686SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService
- CVE-2024-50687SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API
- CVE-2024-50688SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials.
- CVE-2024-50689SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API
- CVE-2024-50693SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService AP
- CVE-2024-53573Unifiedtransform v2.X is vulnerable to Incorrect Access Control.
- CVE-2024-57040TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password f
- CVE-2025-25783An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via
- CVE-2025-25784An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary c
- CVE-2025-25785JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php.
- CVE-2025-25789FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php.
- CVE-2025-25790An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary
High 185
- CVE-2025-1634Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeoutquarkus-resteasy · Red Hat Build of Apache Camel 4.8 for… +5
- CVE-2025-20111Cisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2024-47053Improper Authorization in Reporting APImautic/core
- CVE-2024-13633Simple Catalogue <= 1.0.2 - Reflected XSSSimple catalogue
- CVE-2024-13632WP Extra Fields <= 1.0.1 - Reflected XSSWP Extra Fields
- CVE-2024-13631OM Stripe <= 02.00.00 - Reflected XSSOm Stripe
- CVE-2024-13624WPMovieLibrary <= 2.1.4.8 - Reflected XSSWPMovieLibrary
- CVE-2024-13571Post Timeline < 2.3.10 - Reflected XSSPost Timeline
- CVE-2024-12878Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSSCustom Block Builder
- CVE-2024-10483SimplePress Forum < 6.10.11 - Reflected XSSSimple:Press Forum
- CVE-2024-10152Simple Certain Time to Show Content < 1.3.1 - Reflected XSSSimple Certain Time to Show Content
- CVE-2024-39441In wifi display, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. T310/T606/T612/T616/T610…
- CVE-2025-22868Unexpected memory consumption during token parsing in golang.org/x/oauth2golang.org/x/oauth2/jws · golang.org/x/oauth2
- CVE-2025-22869Potential denial of service in golang.org/x/cryptogolang.org/x/crypto/ssh · golang.org/x/crypto
- CVE-2022-49725i40e: Fix call trace in setup_tx_descriptorsLinux
- CVE-2022-49722ice: Fix memory corruption in VF driverLinux
- CVE-2022-49720block: Fix handling of offline queues in blk_mq_alloc_request_hctx()Linux
- CVE-2022-49711bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()Linux
- CVE-2022-49701scsi: ibmvfc: Allocate/free queue resource only during probe/removeLinux
- CVE-2022-49700mm/slub: add missing TID updates on slab deactivationLinux
- CVE-2022-49696tipc: fix use-after-free Read in tipc_named_reinitLinux
- CVE-2022-49695igb: fix a use-after-free issue in igb_clean_tx_ringLinux
- CVE-2022-49694block: disable the elevator int del_gendiskLinux
- CVE-2022-49685iio: trigger: sysfs: fix use-after-free on removeLinux
- CVE-2022-49672net: tun: unlink NAPI from device on destructionLinux
- CVE-2022-49670linux/dim: Fix divide by 0 in RDMA DIMLinux
- CVE-2022-49669mptcp: fix race on unaccepted mptcp socketsLinux
- CVE-2022-49667net: bonding: fix use-after-free after 802.3ad slave unbindLinux
- CVE-2022-49664tipc: move bc link creation back to tipc_node_createLinux
- CVE-2022-49651srcu: Tighten cleanup_srcu_struct() GP checksLinux
- CVE-2022-49647cgroup: Use separate src/dst nodes when preloading css_sets for migrationLinux
- CVE-2022-49645drm/panfrost: Fix shrinker list corruption by madvise IOCTLLinux
- CVE-2022-49643ima: Fix a potential integer overflow in ima_appraise_measurementLinux
- CVE-2022-49626sfc: fix use after free when disabling sriovLinux
- CVE-2022-49623powerpc/xive/spapr: correct bitmap allocation sizeLinux
- CVE-2022-49622netfilter: nf_tables: avoid skb access on nf_stolenLinux
- CVE-2022-49581be2net: Fix buffer overflow in be_get_module_eepromLinux
- CVE-2022-49564crypto: qat - add param check for DHLinux
- CVE-2022-49563crypto: qat - add param check for RSALinux
- CVE-2022-49562KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bitsLinux
- CVE-2022-49560exfat: check if cluster num is validLinux
- CVE-2022-49557x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)Linux
- CVE-2022-49555Bluetooth: hci_qca: Use del_timer_sync() before freeingLinux
- CVE-2022-49554zsmalloc: fix races between asynchronous zspage free and page migrationLinux
- CVE-2022-49553fs/ntfs3: validate BOOT sectors_per_clustersLinux
- CVE-2022-49551usb: isp1760: Fix out-of-bounds array accessLinux
- CVE-2022-49548bpf: Fix potential array overflow in bpf_trampoline_get_progs()Linux
- CVE-2022-49545ALSA: usb-audio: Cancel pending work at closing a MIDI substreamLinux
- CVE-2022-49541cifs: fix potential double free during failed mountLinux
- CVE-2022-49535scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGILinux
- CVE-2022-49533ath11k: Change max no of active probe SSID and BSSID to fw capabilityLinux
- CVE-2022-49531loop: implement ->free_diskLinux
- CVE-2022-49530drm/amd/pm: fix double free in si_parse_power_table()Linux
- CVE-2022-49524media: pci: cx23885: Fix the error handling in cx23885_initdev()Linux
- CVE-2022-49519ath10k: skip ath10k_halt during suspend for driver state RESTARTINGLinux
- CVE-2022-49511fbdev: defio: fix the pagelist corruptionLinux
- CVE-2022-49508HID: elan: Fix potential double free in elan_input_configuredLinux
- CVE-2022-49505NFC: NULL out the dev->rfkill to prevent UAFLinux
- CVE-2022-49501usbnet: Run unregister_netdev() before unbind() againLinux
- CVE-2022-49500wl1251: dynamically allocate memory used for DMALinux
- CVE-2022-49493ASoC: rt5645: Fix errorenous cleanup orderLinux
- CVE-2022-49489drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resumeLinux
- CVE-2022-49479mt76: fix tx status related use-after-free race on station removalLinux
- CVE-2022-49478media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_initLinux
- CVE-2022-49474Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeoutLinux
- CVE-2022-49471rtw89: cfo: check mac_id to avoid out-of-boundsLinux
- CVE-2022-49470Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_eventLinux
- CVE-2022-49465blk-throttle: Set BIO_THROTTLED when bio has been throttledLinux
- CVE-2022-49464erofs: fix buffer copy overflow of ztailpacking featureLinux
- CVE-2022-49456bonding: fix missed rcu protectionLinux
- CVE-2022-49455misc: ocxl: fix possible double free in ocxl_file_register_afuLinux
- CVE-2022-49452dpaa2-eth: retrieve the virtual address before dma_unmapLinux
- CVE-2022-49451firmware: arm_scmi: Fix list protocols enumeration in the base protocolLinux
- CVE-2022-49426iommu/arm-smmu-v3-sva: Fix mm use-after-freeLinux
- CVE-2022-49425f2fs: fix dereference of stale list iterator after loop bodyLinux
- CVE-2022-49419video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanupLinux
- CVE-2022-49416wifi: mac80211: fix use-after-free in chanctx codeLinux
- CVE-2022-49413bfq: Update cgroup information before merging bioLinux
- CVE-2022-49412bfq: Avoid merging queues with different parentsLinux
- CVE-2022-49411bfq: Make sure bfqg for which we are queueing requests is onlineLinux
- CVE-2022-49410tracing: Fix potential double free in create_var_ref()Linux
- CVE-2022-49405staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()Linux
- CVE-2022-49395um: Fix out-of-bounds read in LDT setupLinux
- CVE-2022-49393misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_implLinux
- CVE-2022-49391remoteproc: mtk_scp: Fix a potential double freeLinux
- CVE-2022-49390macsec: fix UAF bug for real_devLinux
- CVE-2022-49388ubi: ubi_create_volume: Fix use-after-free when volume creation failedLinux
- CVE-2022-49385driver: base: fix UAF when driver_attach failedLinux
- CVE-2022-49384md: fix double free of io_acct_set biosetLinux
- CVE-2022-49377blk-mq: don't touch ->tagset in blk_mq_get_sq_hctxLinux
- CVE-2022-49368net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()Linux
- CVE-2022-49363f2fs: fix to do sanity check on block address in f2fs_do_zero_range()Linux
- CVE-2022-49359drm/panfrost: Job should reference MMU not file_privLinux
- CVE-2022-49349ext4: fix use-after-free in ext4_rename_dir_prepareLinux
- CVE-2022-49343ext4: avoid cycles in directory h-treeLinux
- CVE-2022-49340ip_gre: test csum_start instead of transport headerLinux
- CVE-2022-49337ocfs2: dlmfs: fix error handling of user_dlm_destroy_lockLinux
- CVE-2022-49336drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gemLinux
- CVE-2022-49330tcp: fix tcp_mtup_probe_success vs wrong snd_cwndLinux
- CVE-2022-49328mt76: fix use-after-free by removing a non-RCU wcid pointerLinux
- CVE-2022-49325tcp: add accessors to read/set tp->snd_cwndLinux
- CVE-2022-49321xprtrdma: treat all calls not a bcall when bc_serv is NULLLinux
- CVE-2022-49295nbd: call genl_unregister_family() first in nbd_cleanup()Linux
- CVE-2022-49292ALSA: oss: Fix PCM OSS buffer allocation overflowLinux
- CVE-2022-49291ALSA: pcm: Fix races among concurrent hw_params and hw_free callsLinux
- CVE-2022-49290mac80211: fix potential double free on mesh joinLinux
- CVE-2022-49289uaccess: fix integer overflow on access_ok()Linux
- CVE-2022-49288ALSA: pcm: Fix races among concurrent prealloc proc writesLinux
- CVE-2022-49287tpm: fix reference counting for struct tpm_chipLinux
- CVE-2022-49279NFSD: prevent integer overflow on 32 bit systemsLinux
- CVE-2022-49275can: m_can: m_can_tx_handler(): fix use after free of skbLinux
- CVE-2022-49274ocfs2: fix crash when mount with quota enabledLinux
- CVE-2022-49270dm: fix use-after-free in dm_cleanup_zoned_dev()Linux
- CVE-2022-49264exec: Force single empty string when argv is emptyLinux
- CVE-2022-49261drm/i915/gem: add missing boundary check in vm_accessLinux
- CVE-2022-49258crypto: ccree - Fix use after free in cc_cipher_exit()Linux
- CVE-2022-49238ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855Linux
- CVE-2022-49236bpf: Fix UAF due to race between btf_try_get_module and load_moduleLinux
- CVE-2022-49234net: dsa: Avoid cross-chip syncing of VLAN filteringLinux
- CVE-2022-49231rtw88: fix memory overrun and memory leak during hw_scanLinux
- CVE-2022-49223cxl/port: Hold port reference until decoder releaseLinux
- CVE-2022-49218drm/dp: Fix OOB read when handling Post Cursor2 registerLinux
- CVE-2022-49215xsk: Fix race at socket teardownLinux
- CVE-2022-49203drm/amd/display: Fix double free during GPU reset on DC streamsLinux
- CVE-2022-49196powerpc/pseries: Fix use after free in remove_phb_dynamic()Linux
- CVE-2022-49186clk: visconti: prevent array overflow in visconti_clk_register_gates()Linux
- CVE-2022-49182net: hns3: add vlan list lock to protect vlan listLinux
- CVE-2022-49179block, bfq: don't move oom_bfqqLinux
- CVE-2022-49178memstick/mspro_block: fix handling of read-only devicesLinux
- CVE-2022-49176bfq: fix use-after-free in bfq_dispatch_requestLinux
- CVE-2022-49174ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commitLinux
- CVE-2022-49172parisc: Fix non-access data TLB cache flush faultsLinux
- CVE-2022-49170f2fs: fix to do sanity check on curseg->alloc_typeLinux
- CVE-2022-49168btrfs: do not clean up repair bio if submit failsLinux
- CVE-2022-49167btrfs: do not double complete bio on errors during compressed readsLinux
- CVE-2022-49163media: imx-jpeg: fix a bug of accessing array out of boundsLinux
- CVE-2022-49162video: fbdev: sm712fb: Fix crash in smtcfb_write()Linux
- CVE-2022-49160scsi: qla2xxx: Fix crash during module load unload testLinux
- CVE-2022-49159scsi: qla2xxx: Implement ref count for SRBLinux
- CVE-2022-49154KVM: SVM: fix panic on out-of-bounds guest IRQLinux
- CVE-2022-49142net: preserve skb_end_offset() in skb_unclone_keeptruesize()Linux
- CVE-2022-49138Bluetooth: hci_event: Ignore multiple conn complete eventsLinux
- CVE-2022-49136Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is setLinux
- CVE-2022-49129mt76: mt7921: fix crash when startup fails.Linux
- CVE-2022-49127ref_tracker: implement use-after-free detectionLinux
- CVE-2022-49114scsi: libfc: Fix use after free in fc_exch_abts_resp()Linux
- CVE-2022-49111Bluetooth: Fix use after free in hci_send_aclLinux
- CVE-2022-49110netfilter: conntrack: revisit gc autotuningLinux
- CVE-2022-49096net: sfc: add missing xdp queue reinitializationLinux
- CVE-2022-49092net: ipv4: fix route with nexthop object delete warningLinux
- CVE-2022-49089IB/rdmavt: add lock to call to rvt_error_qp to prevent a race conditionLinux
- CVE-2022-49087rxrpc: fix a race in rxrpc_exit_net()Linux
- CVE-2022-49085drbd: Fix five use after free bugs in get_initial_stateLinux
- CVE-2022-49084qede: confirm skb is allocated before usingLinux
- CVE-2022-49082scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove()Linux
- CVE-2022-49078lz4: fix LZ4_decompress_safe_partial read out of boundLinux
- CVE-2022-49076RDMA/hfi1: Fix use-after-free bug for mm structLinux
- CVE-2022-49075btrfs: fix qgroup reserve overflow the qgroup limitLinux
- CVE-2022-49073ata: sata_dwc_460ex: Fix crash due to OOB writeLinux
- CVE-2022-49065SUNRPC: Fix the svc_deferred_event trace classLinux
- CVE-2022-49063ice: arfs: fix use-after-free when freeing @rx_cpu_rmapLinux
- CVE-2022-49062cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattrLinux
- CVE-2022-49059nfc: nci: add flush_workqueue to prevent uafLinux
- CVE-2022-49054Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guestsLinux
- CVE-2022-49053scsi: target: tcmu: Fix possible page UAFLinux
- CVE-2022-49052mm: fix unexpected zeroed page mapping with zram swapLinux
- CVE-2022-49048ipv6: fix panic when forwarding a pkt with no in6 devLinux
- CVE-2022-49047ep93xx: clock: Fix UAF in ep93xx_clk_register_gate()Linux
- CVE-2021-47656jffs2: fix use-after-free in jffs2_clear_xattr_subsystemLinux
- CVE-2021-47653media: davinci: vpif: fix use-after-free on driver unbindLinux
- CVE-2021-47646Revert "Revert "block, bfq: honor already-setup queue merges""Linux
- CVE-2021-47640powerpc/kasan: Fix early region not updated correctlyLinux
- CVE-2021-47639KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMULinux
- CVE-2021-47638ubifs: rename_whiteout: Fix double free for whiteout_ui->dataLinux
- CVE-2021-47636ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()Linux
- CVE-2021-47635ubifs: Fix to add refcount once page is set privateLinux
- CVE-2021-47634ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctlLinux
- CVE-2025-22881Heap-based Buffer Overflow in CNCSoft-G2Delta Electronics CNCSoft-G2
- CVE-2025-0889Privilege Management for Windows – Elevation of PrivilegeBeyondTrust Privilege Management for Windows
- CVE-2024-50691SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation.
- CVE-2024-50696SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades.
- CVE-2024-53427decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-jqlang jq
- CVE-2024-55581When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack be
- CVE-2025-25823A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra
- CVE-2025-25825A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra
Medium, low and unrated 578
- CVE-2025-1726[#BUG-000172669 ArcGIS Monitor has a security vulnerability]Esri ArcGIS Monitor
- CVE-2025-0941MET ONE 3400+ Potential Credential ExposureBeckman Coulter Life Sciences MET ONE 3400+
- CVE-2025-20119Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2025-20118Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2025-20161Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2025-20117Cisco Application Policy Infrastructure Controller Authenticated Command Injection VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2025-20116Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2022-49732sock: redo the psock vs ULP protection checkLinux
- CVE-2025-1716picklescan - Security scanning bypass via 'pip main'mmaitre314 picklescan · picklescan
- CVE-2025-1249WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerabilityMarcus (aka @msykes) Events Manager
- CVE-2025-0719IBM Cloud Pak for Data cross-site scriptingIBM Cloud Pak for Data
- CVE-2025-26925WordPress Admin Menu Manager plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerabilityRequired Admin Menu Manager
- CVE-2022-25773Relative Path Traversal in assets file uploadmautic/core
- CVE-2024-6810Quiz Organizer <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scriptingquizorganizer Quiz Organizer
- CVE-2025-0731SMA: Sunny Portal Remote Code ExecutionSMA www.sunnyportal.com
- CVE-2025-26698Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser.J’s Communication Co. RevoWorks SCVX · J’s Communication Co…
- CVE-2025-1517Sina Extension for Elementor <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodesshaonsina Sina Extension for Elementor
- CVE-2024-13560Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletionscottpaterson Subscriptions & Memberships for PayPal
- CVE-2024-13803Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpdevteam Gutenberg Essential Blocks – Page Builder for Gut…
- CVE-2024-13678R3W Instafeed <= 1.0 - Reflected XSSR3W InstaFeed
- CVE-2024-13669CalendApp <= 1.1 - Reflected XSSCalendApp
- CVE-2024-13634Post Sync <= 1.1 - Reflected XSSPost Sync
- CVE-2024-13630News List <= 1.0 - Reflected XSSNewsTicker
- CVE-2024-13629Pushbiz <= 1.0 - Reflected XSSpushBIZ
- CVE-2024-13628WP Pricing Table <= 1.1 - Reflected XSSWP Pricing Table
- CVE-2024-13113Countdown Timer for Elementor < 1.3.7 - Contributor+ Stored XSSCountdown Timer for Elementor
- CVE-2024-12737WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSSWP BASE Booking of Appointments, Services and Events
- CVE-2024-10563WooCommerce Cart Count Shortcode < 1.1.0 - Contributor+ XSSWooCommerce Cart Count Shortcode
- CVE-2024-12434SureMembers <= 1.10.6 - Sensitive Information ExposureBrainstorm Force SureMembers
- CVE-2022-49731ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()Linux
- CVE-2022-49729nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferredLinux
- CVE-2022-49728ipv6: Fix signed integer overflow in __ip6_append_dataLinux
- CVE-2022-49727ipv6: Fix signed integer overflow in l2tp_ip6_sendmsgLinux
- CVE-2022-49726clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()Linux
- CVE-2022-49724tty: goldfish: Fix free_irq() on removeLinux
- CVE-2022-49723drm/i915/reset: Fix error_state_read ptr + offset useLinux
- CVE-2022-49721arm64: ftrace: consistently handle PLTs.Linux
- CVE-2022-49719irqchip/gic/realview: Fix refcount leak in realview_gic_of_initLinux
- CVE-2022-49718irqchip/apple-aic: Fix refcount leak in aic_of_ic_initLinux
- CVE-2022-49717irqchip/apple-aic: Fix refcount leak in build_fiq_affinityLinux
- CVE-2022-49716irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitionsLinux
- CVE-2022-49715irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitionsLinux
- CVE-2022-49714irqchip/realtek-rtl: Fix refcount leak in map_interruptsLinux
- CVE-2022-49713usb: dwc2: Fix memory leak in dwc2_hcd_initLinux
- CVE-2022-49712usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probeLinux
- CVE-2022-49710dm mirror log: round up region bitmap size to BITS_PER_LONGLinux
- CVE-2022-49709cfi: Fix __cfi_slowpath_diag RCU usage with cpuidleLinux
- CVE-2022-49708ext4: fix bug_on ext4_mb_use_inode_paLinux
- CVE-2022-49707ext4: add reserved GDT blocks checkLinux
- CVE-2022-49706zonefs: fix zonefs_iomap_begin() for readsLinux
- CVE-2022-497059p: fix fid refcount leak in v9fs_vfs_atomic_open_dotlLinux
- CVE-2022-497049p: fix fid refcount leak in v9fs_vfs_get_linkLinux
- CVE-2022-49703scsi: ibmvfc: Store vhost pointer during subcrq allocationLinux
- CVE-2022-49702btrfs: fix hang during unmount when block group reclaim task is runningLinux
- CVE-2022-49699filemap: Handle sibling entries in filemap_get_read_batch()Linux
- CVE-2022-49698netfilter: use get_random_u32 instead of prandomLinux
- CVE-2022-49697bpf: Fix request_sock leak in sk lookup helpersLinux
- CVE-2022-49693drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intfLinux
- CVE-2022-49692net: phy: at803x: fix NULL pointer dereference on AR9331 PHYLinux
- CVE-2022-49691erspan: do not assume transport header is always setLinux
- CVE-2022-49688afs: Fix dynamic root getattrLinux
- CVE-2022-49687virtio_net: fix xdp_rxq_info bug after suspend/resumeLinux
- CVE-2022-49686usb: gadget: uvc: fix list double add in uvcg_video_pumpLinux
- CVE-2022-49684iio: adc: aspeed: Fix refcount leak in aspeed_adc_set_trim_dataLinux
- CVE-2022-49683iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_clientLinux
- CVE-2022-49682xtensa: Fix refcount leak bug in time.cLinux
- CVE-2022-49681xtensa: xtfpga: Fix refcount leak bug in setupLinux
- CVE-2022-49680ARM: exynos: Fix refcount leak in exynos_map_pmuLinux
- CVE-2022-49679ARM: Fix refcount leak in axxia_boot_secondaryLinux
- CVE-2022-49678soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probeLinux
- CVE-2022-49677ARM: cns3xxx: Fix refcount leak in cns3xxx_initLinux
- CVE-2022-49676memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timingsLinux
- CVE-2022-49675tick/nohz: unexport __init-annotated tick_nohz_full_setup()Linux
- CVE-2022-49674dm raid: fix accesses beyond end of raid member arrayLinux
- CVE-2022-49673dm raid: fix KASAN warning in raid5_add_disksLinux
- CVE-2022-49671RDMA/cm: Fix memory leak in ib_cm_insert_listenLinux
- CVE-2022-49668PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_eventsLinux
- CVE-2022-49666powerpc/memhotplug: Add add_pages override for PPCLinux
- CVE-2022-49665platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resourceLinux
- CVE-2022-49663tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()Linux
- CVE-2022-49662ipv6: fix lockdep splat in in6_dump_addrs()Linux
- CVE-2022-49661can: gs_usb: gs_usb_open/close(): fix memory leakLinux
- CVE-2022-49659can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bitsLinux
- CVE-2022-49658bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_valsLinux
- CVE-2022-49657usbnet: fix memory leak in error caseLinux
- CVE-2022-49656ARM: meson: Fix refcount leak in meson_smp_prepare_cpusLinux
- CVE-2022-49655fscache: Fix invalidation/lookup raceLinux
- CVE-2022-49654net: dsa: qca8k: reset cpu port on MTU changeLinux
- CVE-2022-49653i2c: piix4: Fix a memory leak in the EFCH MMIO supportLinux
- CVE-2022-49652dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocateLinux
- CVE-2022-49650dmaengine: qcom: bam_dma: fix runtime PM underflowLinux
- CVE-2022-49649xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queueLinux
- CVE-2022-49648tracing/histograms: Fix memory leak problemLinux
- CVE-2022-49646wifi: mac80211: fix queue selection for mesh/OCB interfacesLinux
- CVE-2022-49644drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()Linux
- CVE-2022-49642net: stmmac: dwc-qos: Disable split header for Tegra194Linux
- CVE-2022-49641sysctl: Fix data races in proc_douintvec().Linux
- CVE-2022-49640sysctl: Fix data races in proc_douintvec_minmax().Linux
- CVE-2022-49639cipso: Fix data-races around sysctl.Linux
- CVE-2022-49638icmp: Fix data-races around sysctl.Linux
- CVE-2022-49637ipv4: Fix a data-race around sysctl_fib_sync_mem.Linux
- CVE-2022-49636vlan: fix memory leak in vlan_newlink()Linux
- CVE-2022-49635drm/i915/selftests: fix subtraction overflow bugLinux
- CVE-2022-49634sysctl: Fix data-races in proc_dou8vec_minmax().Linux
- CVE-2022-49633icmp: Fix data-races around sysctl_icmp_echo_enable_probe.Linux
- CVE-2022-49632icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.Linux
- CVE-2022-49631raw: Fix a data-race around sysctl_raw_l3mdev_accept.Linux
- CVE-2022-49630tcp: Fix a data-race around sysctl_tcp_ecn_fallback.Linux
- CVE-2022-49629nexthop: Fix data-races around nexthop_compat_mode.Linux
- CVE-2022-49628net: stmmac: fix leaks in probeLinux
- CVE-2022-49627ima: Fix potential memory leak in ima_init_crypto()Linux
- CVE-2022-49625sfc: fix kernel panic when creating VFLinux
- CVE-2022-49624net: atlantic: remove aq_nic_deinit() when resumeLinux
- CVE-2022-49621cpufreq: pmac32-cpufreq: Fix refcount leak bugLinux
- CVE-2022-49620net: tipc: fix possible refcount leak in tipc_sk_create()Linux
- CVE-2022-49619net: sfp: fix memory leak in sfp_probe()Linux
- CVE-2022-49618pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()Linux
- CVE-2022-49617ASoC: Intel: sof_sdw: handle errors on card registrationLinux
- CVE-2022-49616ASoC: rt7*-sdw: harden jack_detect_handlerLinux
- CVE-2022-49615ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO errorLinux
- CVE-2022-49613serial: 8250: Fix PM usage_count for console handoverLinux
- CVE-2022-49612power: supply: core: Fix boundary conditions in interpolationLinux
- CVE-2022-49611x86/speculation: Fill RSB on vmexit for IBRSLinux
- CVE-2022-49610KVM: VMX: Prevent RSB underflow before vmenterLinux
- CVE-2022-49609power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probeLinux
- CVE-2022-49608pinctrl: ralink: Check for null return of devm_kcallocLinux
- CVE-2022-49607perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()Linux
- CVE-2022-49606RDMA/irdma: Fix sleep from invalid context BUGLinux
- CVE-2022-49605igc: Reinstate IGC_REMOVED logic and implement it properlyLinux
- CVE-2022-49604ip: Fix data-races around sysctl_ip_fwd_use_pmtu.Linux
- CVE-2022-49603ip: Fix data-races around sysctl_ip_fwd_update_priority.Linux
- CVE-2022-49602ip: Fix a data-race around sysctl_fwmark_reflect.Linux
- CVE-2022-49601tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.Linux
- CVE-2022-49600ip: Fix a data-race around sysctl_ip_autobind_reuse.Linux
- CVE-2022-49599tcp: Fix data-races around sysctl_tcp_l3mdev_accept.Linux
- CVE-2022-49598tcp: Fix data-races around sysctl_tcp_mtu_probing.Linux
- CVE-2022-49597tcp: Fix data-races around sysctl_tcp_base_mss.Linux
- CVE-2022-49596tcp: Fix data-races around sysctl_tcp_min_snd_mss.Linux
- CVE-2022-49595tcp: Fix a data-race around sysctl_tcp_probe_threshold.Linux
- CVE-2022-49594tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.Linux
- CVE-2022-49593tcp: Fix a data-race around sysctl_tcp_probe_interval.Linux
- CVE-2022-49592net: stmmac: fix dma queue left shift overflow issueLinux
- CVE-2022-49591net: dsa: microchip: ksz_common: Fix refcount leak bugLinux
- CVE-2022-49590igmp: Fix data-races around sysctl_igmp_llm_reports.Linux
- CVE-2022-49589igmp: Fix data-races around sysctl_igmp_qrv.Linux
- CVE-2022-49588tcp: Fix data-races around sysctl_tcp_migrate_req.Linux
- CVE-2022-49587tcp: Fix a data-race around sysctl_tcp_notsent_lowat.Linux
- CVE-2022-49586tcp: Fix data-races around sysctl_tcp_fastopen.Linux
- CVE-2022-49585tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.Linux
- CVE-2022-49584ixgbe: Add locking to prevent panic when setting sriov_numvfs to zeroLinux
- CVE-2022-49583iavf: Fix handling of dummy receive descriptorsLinux
- CVE-2022-49582net: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filteringLinux
- CVE-2022-49580ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.Linux
- CVE-2022-49579ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.Linux
- CVE-2022-49578ip: Fix data-races around sysctl_ip_prot_sock.Linux
- CVE-2022-49577udp: Fix a data-race around sysctl_udp_l3mdev_accept.Linux
- CVE-2022-49576ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.Linux
- CVE-2022-49575tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.Linux
- CVE-2022-49574tcp: Fix data-races around sysctl_tcp_recovery.Linux
- CVE-2022-49573tcp: Fix a data-race around sysctl_tcp_early_retrans.Linux
- CVE-2022-49572tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.Linux
- CVE-2022-49571tcp: Fix data-races around sysctl_tcp_max_reordering.Linux
- CVE-2022-49570gpio: gpio-xilinx: Fix integer overflowLinux
- CVE-2022-49569spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfersLinux
- CVE-2022-49568KVM: Don't null dereference ops->destroyLinux
- CVE-2022-49567mm/mempolicy: fix uninit-value in mpol_rebind_policy()Linux
- CVE-2022-49566crypto: qat - fix memory leak in RSALinux
- CVE-2022-49565perf/x86/intel/lbr: Fix unchecked MSR access error on HSWLinux
- CVE-2021-4453drm/amd/pm: fix a potential gpu_metrics_table memory leakLinux
- CVE-2022-49559KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2Linux
- CVE-2022-49558netfilter: nf_tables: double hook unregistration in netns pathLinux
- CVE-2022-49556KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leakLinux
- CVE-2022-49552bpf: Fix combination of jit blinding and pointers to bpf subprogs.Linux
- CVE-2022-49550fs/ntfs3: provide block_invalidate_folio to fix memory leakLinux
- CVE-2022-49549x86/MCE/AMD: Fix memory leak when threshold_create_bank() failsLinux
- CVE-2022-49547btrfs: fix deadlock between concurrent dio writes when low on free data spaceLinux
- CVE-2022-49546x86/kexec: fix memory leak of elf header bufferLinux
- CVE-2022-49544ipw2x00: Fix potential NULL dereference in libipw_xmit()Linux
- CVE-2022-49543ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()Linux
- CVE-2022-49542scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()Linux
- CVE-2022-49540rcu-tasks: Fix race in schedule and flush workLinux
- CVE-2022-49539rtw89: ser: fix CAM leaks occurring in L2 resetLinux
- CVE-2022-49538ALSA: jack: Access input_dev under mutexLinux
- CVE-2022-49537scsi: lpfc: Fix call trace observed during I/O with CMF enabledLinux
- CVE-2022-49536scsi: lpfc: Fix SCSI I/O completion and abort handler deadlockLinux
- CVE-2022-49534scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJTLinux
- CVE-2022-49532drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modesLinux
- CVE-2022-49529drm/amdgpu/pm: fix the null pointer while the smu is disabledLinux
- CVE-2022-49528media: i2c: dw9714: Disable the regulator when the driver fails to probeLinux
- CVE-2022-49527media: venus: hfi: avoid null dereference in deinitLinux
- CVE-2022-49526md/bitmap: don't set sb values if can't pass sanity checkLinux
- CVE-2022-49525media: cx25821: Fix the warning when removing the moduleLinux
- CVE-2022-49523ath11k: disable spectral scan during spectral deinitLinux
- CVE-2022-49522mmc: jz4740: Apply DMA engine limits to maximum segment sizeLinux
- CVE-2022-49521scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()Linux
- CVE-2022-49520arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscallLinux
- CVE-2022-49518ASoC: SOF: ipc3-topology: Correct get_control_data for non bytes payloadLinux
- CVE-2022-49517ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probeLinux
- CVE-2022-49516ice: always check VF VSI pointer valuesLinux
- CVE-2022-49515ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_tLinux
- CVE-2022-49514ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probeLinux
- CVE-2022-49513cpufreq: governor: Use kobject release() method to free dbs_dataLinux
- CVE-2022-49512mtd: rawnand: denali: Use managed device resourcesLinux
- CVE-2022-49510drm/omap: fix NULL but dereferenced coccicheck errorLinux
- CVE-2022-49509media: i2c: max9286: fix kernel oops when removing moduleLinux
- CVE-2022-49507regulator: da9121: Fix uninit-value in da9121_assign_chip_model()Linux
- CVE-2022-49506drm/mediatek: Add vblank register/unregister callback functionsLinux
- CVE-2022-49504scsi: lpfc: Inhibit aborts if external loopback plug is insertedLinux
- CVE-2022-49503ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyixLinux
- CVE-2022-49502media: rga: fix possible memory leak in rga_probeLinux
- CVE-2022-49499drm/msm: Fix null pointer dereferences without iommuLinux
- CVE-2022-49498ALSA: pcm: Check for null pointer of pointer substream before dereferencing itLinux
- CVE-2022-49497net: remove two BUG() from skb_checksum_help()Linux
- CVE-2022-49496media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.koLinux
- CVE-2022-49495drm/msm/hdmi: check return value after calling platform_get_resource_byname()Linux
- CVE-2022-49494mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()Linux
- CVE-2022-49492nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tagsLinux
- CVE-2022-49491drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()Linux
- CVE-2022-49490drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detectedLinux
- CVE-2022-49488drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detectedLinux
- CVE-2022-49487mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()Linux
- CVE-2022-49486ASoC: fsl: Fix refcount leak in imx_sgtl5000_probeLinux
- CVE-2022-49485drm/v3d: Fix null pointer dereference of pointer perfmonLinux
- CVE-2022-49484mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vectorLinux
- CVE-2022-49483drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninitLinux
- CVE-2022-49482ASoC: mxs-saif: Fix refcount leak in mxs_saif_probeLinux
- CVE-2022-49481regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dtLinux
- CVE-2022-49480ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probeLinux
- CVE-2022-49477ASoC: samsung: Fix refcount leak in aries_audio_probeLinux
- CVE-2022-49476mt76: mt7921: fix kernel crash at mt7921_pci_removeLinux
- CVE-2022-49475spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()Linux
- CVE-2022-49473ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*Linux
- CVE-2022-49472net: phy: micrel: Allow probing without .driver_dataLinux
- CVE-2022-49469btrfs: fix anon_dev leak in create_subvol()Linux
- CVE-2022-49468thermal/core: Fix memory leak in __thermal_cooling_device_register()Linux
- CVE-2022-49467drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()Linux
- CVE-2022-49466regulator: scmi: Fix refcount leak in scmi_regulator_probeLinux
- CVE-2022-49463thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probeLinux
- CVE-2022-49462drm/msm/a6xx: Fix refcount leak in a6xx_gpu_initLinux
- CVE-2022-49461amt: fix memory leak for advertisement messageLinux
- CVE-2022-49460PM / devfreq: rk3399_dmc: Disable edev on remove()Linux
- CVE-2022-49459thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probeLinux
- CVE-2022-49458drm/msm: don't free the IRQ if it was not requestedLinux
- CVE-2022-49457ARM: versatile: Add missing of_node_put in dcscb_initLinux
- CVE-2022-49454PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()Linux
- CVE-2022-49453soc: ti: ti_sci_pm_domains: Check for null return of devm_kcallocLinux
- CVE-2022-49450rxrpc: Fix listen() setting the bar too high for the prealloc ringsLinux
- CVE-2022-49449pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()Linux
- CVE-2022-49448soc: bcm: Check for NULL return of devm_kzalloc()Linux
- CVE-2022-49447ARM: hisi: Add missing of_node_put after of_find_compatible_nodeLinux
- CVE-2022-49446nvdimm: Fix firmware activation deadlock scenariosLinux
- CVE-2022-49445pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()Linux
- CVE-2022-49444module: fix [e_shstrndx].sh_size=0 OOB accessLinux
- CVE-2022-49443list: fix a data-race around ep->rdllistLinux
- CVE-2022-49442drivers/base/node.c: fix compaction sysfs file leakLinux
- CVE-2022-49441tty: fix deadlock caused by calling printk() under tty_port->lockLinux
- CVE-2022-49440powerpc/rtas: Keep MSR[RI] set when calling RTASLinux
- CVE-2022-49439powerpc/fsl_rio: Fix refcount leak in fsl_rio_setupLinux
- CVE-2022-49438Input: sparcspkr - fix refcount leak in bbc_beep_probeLinux
- CVE-2022-49437powerpc/xive: Fix refcount leak in xive_spapr_initLinux
- CVE-2022-49436powerpc/papr_scm: Fix leaking nvdimm_events_map elementsLinux
- CVE-2022-49435mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()Linux
- CVE-2022-49434PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()Linux
- CVE-2022-49433RDMA/hfi1: Prevent use of lock before it is initializedLinux
- CVE-2022-49432powerpc/xics: fix refcount leak in icp_opal_init()Linux
- CVE-2022-49431powerpc/iommu: Add missing of_node_put in iommu_init_early_dartLinux
- CVE-2022-49430Input: gpio-keys - cancel delayed work only in case of GPIOLinux
- CVE-2022-49429RDMA/hfi1: Prevent panic when SDMA is disabledLinux
- CVE-2022-49428f2fs: fix to do sanity check on inline_dots inodeLinux
- CVE-2022-49427iommu/mediatek: Remove clk_disable in mtk_iommu_removeLinux
- CVE-2022-49424iommu/mediatek: Fix NULL pointer dereference when printing dev_nameLinux
- CVE-2022-49423rtla: Avoid record NULL pointer dereferenceLinux
- CVE-2022-49422dmaengine: idxd: Fix the error handling path in idxd_cdev_register()Linux
- CVE-2022-49421video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setupLinux
- CVE-2022-49420net: annotate races around sk->sk_bound_dev_ifLinux
- CVE-2022-49417iwlwifi: mei: fix potential NULL-ptr derefLinux
- CVE-2022-49415ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probeLinux
- CVE-2022-49414ext4: fix race condition between ext4_write and ext4_convert_inline_dataLinux
- CVE-2022-49409ext4: fix bug_on in __es_tree_searchLinux
- CVE-2022-49408ext4: fix memory leak in parse_apply_sb_mount_options()Linux
- CVE-2022-49406block: Fix potential deadlock in blk_ia_range_sysfs_show()Linux
- CVE-2022-49404RDMA/hfi1: Fix potential integer multiplication overflow errorsLinux
- CVE-2022-49403lib/string_helpers: fix not adding strarray to device's resource listLinux
- CVE-2022-49402ftrace: Clean up hash direct_functions on register failuresLinux
- CVE-2022-49401mm/page_owner: use strscpy() instead of strlcpy()Linux
- CVE-2022-49400md: Don't set mddev private to NULL in raid0 pers->freeLinux
- CVE-2022-49399tty: goldfish: Use tty_port_destroy() to destroy portLinux
- CVE-2022-49398usb: dwc3: gadget: Replace list_for_each_entry_safe() if using givebackLinux
- CVE-2022-49397phy: qcom-qmp: fix struct clk leak on probe errorsLinux
- CVE-2022-49396phy: qcom-qmp: fix reset-controller leak on probe errorsLinux
- CVE-2022-49394blk-iolatency: Fix inflight count imbalances and IO hangs on offlineLinux
- CVE-2022-49392serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probeLinux
- CVE-2022-49389usb: usbip: fix a refcount leak in stub_probe()Linux
- CVE-2022-49387watchdog: rzg2l_wdt: Fix 32bit overflow issueLinux
- CVE-2022-49386net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaksLinux
- CVE-2022-49383watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context'Linux
- CVE-2022-49382soc: rockchip: Fix refcount leak in rockchip_grf_initLinux
- CVE-2022-49381jffs2: fix memory leak in jffs2_do_fill_superLinux
- CVE-2022-49380f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()Linux
- CVE-2022-49379driver core: Fix wait_for_device_probe() & deferred_probe_timeout interactionLinux
- CVE-2022-49378sfc: fix considering that all channels have TX queuesLinux
- CVE-2022-49376scsi: sd: Fix potential NULL pointer dereferenceLinux
- CVE-2022-49375rtc: mt6397: check return value after calling platform_get_resource()Linux
- CVE-2022-49374tipc: check attribute length for bearer nameLinux
- CVE-2022-49373watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probeLinux
- CVE-2022-49372tcp: tcp_rtx_synack() can be called from process contextLinux
- CVE-2022-49371driver core: fix deadlock in __device_attachLinux
- CVE-2022-49370firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handleLinux
- CVE-2022-49369amt: fix possible memory leak in amt_rcv()Linux
- CVE-2022-49367net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_registerLinux
- CVE-2022-49366ksmbd: fix reference count leak in smb_check_perm_dacl()Linux
- CVE-2022-49365drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()Linux
- CVE-2022-49364f2fs: fix to clear dirty inode in f2fs_evict_inode()Linux
- CVE-2022-49361f2fs: fix to do sanity check for inline inodeLinux
- CVE-2022-49360f2fs: fix to do sanity check on total_data_blocksLinux
- CVE-2022-49358netfilter: nf_tables: memleak flow rule from commit pathLinux
- CVE-2022-49357efi: Do not import certificates from UEFI Secure Boot for T2 MacsLinux
- CVE-2022-49354ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probeLinux
- CVE-2022-49353powerpc/papr_scm: don't requests stats with '0' sized stats bufferLinux
- CVE-2022-49352ext4: fix warning in ext4_handle_inode_extensionLinux
- CVE-2022-49351net: altera: Fix refcount leak in altera_tse_mdio_createLinux
- CVE-2022-49350net: mdio: unexport __init-annotated mdio_bus_init()Linux
- CVE-2022-49348ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_stateLinux
- CVE-2022-49347ext4: fix bug_on in ext4_writepagesLinux
- CVE-2022-49346net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_listLinux
- CVE-2022-49345net: xfrm: unexport __init-annotated xfrm4_protocol_init()Linux
- CVE-2022-49344af_unix: Fix a data-race in unix_dgram_peer_wake_me().Linux
- CVE-2022-49342net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_registerLinux
- CVE-2022-49341bpf, arm64: Clear prog->jited_len along prog->jitedLinux
- CVE-2022-49339net: ipv6: unexport __init-annotated seg6_hmac_init()Linux
- CVE-2022-49338net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rulesLinux
- CVE-2022-49335drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.Linux
- CVE-2022-49334mm/huge_memory: Fix xarray node memory leakLinux
- CVE-2022-49333net/mlx5: E-Switch, pair only capable devicesLinux
- CVE-2022-49332scsi: lpfc: Address NULL pointer dereference after starget_to_rport()Linux
- CVE-2022-49331nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handlingLinux
- CVE-2022-49329vduse: Fix NULL pointer dereference on sysfs accessLinux
- CVE-2022-49327bcache: avoid journal no-space deadlock by reserving 1 journal bucketLinux
- CVE-2022-49326rtl818x: Prevent using not initialized queuesLinux
- CVE-2022-49324mips: cpc: Fix refcount leak in mips_cpc_default_phys_baseLinux
- CVE-2022-49323iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()Linux
- CVE-2022-49322tracing: Fix sleeping function called from invalid context on RT kernelLinux
- CVE-2022-49320dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data typeLinux
- CVE-2022-49319iommu/arm-smmu-v3: check return value after calling platform_get_resource()Linux
- CVE-2022-49318f2fs: remove WARN_ON in f2fs_is_valid_blkaddrLinux
- CVE-2022-49317f2fs: avoid infinite loop to flush node pagesLinux
- CVE-2022-49316NFSv4: Don't hold the layoutget locks across multiple RPC callsLinux
- CVE-2022-49315drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()Linux
- CVE-2022-49314tty: Fix a possible resource leak in icom_probeLinux
- CVE-2022-49313drivers: usb: host: Fix deadlock in oxu_bus_suspend()Linux
- CVE-2022-49312staging: rtl8712: fix a potential memory leak in r871xu_drv_init()Linux
- CVE-2022-49311drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()Linux
- CVE-2022-49310char: xillybus: fix a refcount leak in cleanup_dev()Linux
- CVE-2022-49309drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()Linux
- CVE-2022-49308extcon: Modify extcon device to be created after driver data is setLinux
- CVE-2022-49307tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()Linux
- CVE-2022-49306usb: dwc3: host: Stop setting the ACPI companionLinux
- CVE-2022-49305drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()Linux
- CVE-2022-49304drivers: tty: serial: Fix deadlock in sa1100_set_termios()Linux
- CVE-2022-49303drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandleLinux
- CVE-2022-49302USB: host: isp116x: check return value after calling platform_get_resource()Linux
- CVE-2022-49301staging: rtl8712: fix uninit-value in usb_read8() and friendsLinux
- CVE-2022-49300nbd: fix race between nbd_alloc_config() and module removalLinux
- CVE-2021-47660fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'Linux
- CVE-2021-47659drm/plane: Move range check for format_count earlierLinux
- CVE-2022-49298staging: rtl8712: fix uninit-value in r871xu_drv_init()Linux
- CVE-2022-49297nbd: fix io hung while disconnecting deviceLinux
- CVE-2022-49296ceph: fix possible deadlock when holding Fwb to get inline_dataLinux
- CVE-2022-49294drm/amd/display: Check if modulo is 0 before dividing.Linux
- CVE-2021-47658drm/amd/pm: fix a potential gpu_metrics_table memory leakLinux
- CVE-2025-0236Out-of-bounds vulnerability in slope processing during curve rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver Canon Generic PCL6 V4 Printer Driver · Canon Generic UFR… +1
- CVE-2022-49293netfilter: nf_tables: initialize registers in nft_do_chain()Linux
- CVE-2022-49286tpm: use try_get_ops() in tpm-space.cLinux
- CVE-2022-49285iio: accel: mma8452: use the correct logic to get mma8452_dataLinux
- CVE-2025-0235Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 PrinCanon Generic PCL6 V4 Printer Driver · Canon Generic UFR… +1
- CVE-2022-49284coresight: syscfg: Fix memleak on registration failure in cscfg_create_deviceLinux
- CVE-2022-49283firmware: sysfb: fix platform-device leak in error pathLinux
- CVE-2022-49282f2fs: quota: fix loop condition at f2fs_quota_sync()Linux
- CVE-2022-49281cifs: fix handlecache and multiuserLinux
- CVE-2022-49278remoteproc: Fix count check in rproc_coredump_write()Linux
- CVE-2022-49277jffs2: fix memory leak in jffs2_do_mount_fsLinux
- CVE-2022-49276jffs2: fix memory leak in jffs2_scan_mediumLinux
- CVE-2022-49273rtc: pl031: fix rtc features null pointer dereferenceLinux
- CVE-2022-49272ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lockLinux
- CVE-2022-49271cifs: prevent bad output lengths in smb2_ioctl_query_info()Linux
- CVE-2022-49269can: isotp: sanitize CAN ID checks in isotp_bind()Linux
- CVE-2022-49268ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEMLinux
- CVE-2022-49266block: fix rq-qos breakage from skipping rq_qos_done_bio()Linux
- CVE-2022-49265PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove()Linux
- CVE-2022-49263brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error pathLinux
- CVE-2022-49262crypto: octeontx2 - remove CONFIG_DM_CRYPT checkLinux
- CVE-2022-49259block: don't delete queue kobject before its childrenLinux
- CVE-2022-49257watch_queue: Fix NULL dereference in error cleanupLinux
- CVE-2022-49256watch_queue: Actually free the watchLinux
- CVE-2022-49255f2fs: fix missing free nid in f2fs_handle_failed_inodeLinux
- CVE-2022-49254media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()Linux
- CVE-2022-49253media: usb: go7007: s2250-board: fix leak in probe()Linux
- CVE-2022-49252ASoC: codecs: rx-macro: fix accessing array out of bounds for enum typeLinux
- CVE-2022-49251ASoC: codecs: va-macro: fix accessing array out of bounds for enum typeLinux
- CVE-2022-49250ASoC: codecs: rx-macro: fix accessing compander for auxLinux
- CVE-2022-49249ASoC: codecs: wc938x: fix accessing array out of bounds for enum typeLinux
- CVE-2022-49248ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transactionLinux
- CVE-2022-49247media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUEDLinux
- CVE-2022-49246ASoC: atmel: Fix error handling in snd_proto_probeLinux
- CVE-2022-49245ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resumeLinux
- CVE-2022-49244ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probeLinux
- CVE-2022-49243ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probeLinux
- CVE-2022-49242ASoC: mxs: Fix error handling in mxs_sgtl5000_probeLinux
- CVE-2022-49241ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probeLinux
- CVE-2022-49240ASoC: mediatek: mt8195: Fix error handling in mt8195_mt6359_rt1019_rt5682_dev_probeLinux
- CVE-2022-49239ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_dataLinux
- CVE-2022-49237ath11k: add missing of_node_put() to avoid leakLinux
- CVE-2022-49235ath9k_htc: fix uninit value bugsLinux
- CVE-2022-49233drm/amd/display: Call dc_stream_release for remove link enc assignmentLinux
- CVE-2022-49232drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()Linux
- CVE-2022-49230mt76: mt7915: fix possible memory leak in mt7915_mcu_add_staLinux
- CVE-2022-49229ptp: unregister virtual clocks when unregistering physical clock.Linux
- CVE-2022-49228bpf: Fix a btf decl_tag bug when tagging a functionLinux
- CVE-2022-49227igc: avoid kernel warning when changing RX ring parametersLinux
- CVE-2022-49226net: asix: add proper error handling of usb read errorsLinux
- CVE-2022-49225mt76: mt7921s: fix a possible memory leak in mt7921_load_patchLinux
- CVE-2022-49224power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_initLinux
- CVE-2022-49222drm/bridge: anx7625: Fix overflow issue on reading EDIDLinux
- CVE-2022-49221drm/msm/dp: populate connector of struct dp_panelLinux
- CVE-2022-49220dax: make sure inodes are flushed before destroy cacheLinux
- CVE-2022-49219vfio/pci: fix memory leak during D3hot to D0 transitionLinux
- CVE-2022-49217scsi: pm8001: Fix abort all task initializationLinux
- CVE-2022-49216drm/tegra: Fix reference leak in tegra_dsi_ganged_probeLinux
- CVE-2022-49214powerpc/64s: Don't use DSISR for SLB faultsLinux
- CVE-2022-49213ath10k: Fix error handling in ath10k_setup_msa_resourcesLinux
- CVE-2022-49212mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_initLinux
- CVE-2022-49211mips: cdmm: Fix refcount leak in mips_cdmm_phys_baseLinux
- CVE-2022-49210MIPS: pgalloc: fix memory leak caused by pgd_free()Linux
- CVE-2022-49209bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is fullLinux
- CVE-2022-49208RDMA/irdma: Prevent some integer underflowsLinux
- CVE-2022-49207bpf, sockmap: Fix memleak in sk_psock_queue_msgLinux
- CVE-2022-49206RDMA/mlx5: Fix memory leak in error flow for subscribe event routineLinux
- CVE-2022-49205bpf, sockmap: Fix double uncharge the mem of sk_msgLinux
- CVE-2022-49204bpf, sockmap: Fix more uncharged while msg has more_dataLinux
- CVE-2022-49202Bluetooth: hci_uart: add missing NULL check in h5_enqueueLinux
- CVE-2022-49200Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interruptLinux
- CVE-2022-49199RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()Linux
- CVE-2022-49198mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skbLinux
- CVE-2022-49197af_netlink: Fix shift out of bounds in group mask calculationLinux
- CVE-2022-49195net: dsa: fix panic on shutdown if multi-chip tree failed to probeLinux
- CVE-2022-49193ice: fix 'scheduling while atomic' on aux critical err interruptLinux
- CVE-2022-49192drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtoolLinux
- CVE-2022-49191mxser: fix xmit_buf leak in activate when LSR == 0xffLinux
- CVE-2022-49190kernel/resource: fix kfree() of bootmem memory againLinux
- CVE-2022-49189clk: qcom: clk-rcg2: Update logic to calculate D value for RCGLinux
- CVE-2022-49188remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_regionLinux
- CVE-2022-49187clk: Fix clk_hw_get_clk() when dev is NULLLinux
- CVE-2022-49185pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probeLinux
- CVE-2022-49184net: sparx5: switchdev: fix possible NULL pointer dereferenceLinux
- CVE-2022-49183net/sched: act_ct: fix ref leak when switching zonesLinux
- CVE-2022-49180LSM: general protection fault in legacy_parse_paramLinux
- CVE-2022-49177hwrng: cavium - fix NULL but dereferenced coccicheck errorLinux
- CVE-2022-49175PM: core: keep irq flags in device_pm_check_callbacks()Linux
- CVE-2022-49173spi: fsi: Implement a timeout for polling statusLinux
- CVE-2022-49171ext4: don't BUG if someone dirty pages without asking ext4 firstLinux
- CVE-2022-49169f2fs: use spin_lock to avoid hangLinux
- CVE-2022-49166ntfs: add sanity check on allocation sizeLinux
- CVE-2022-49165media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffersLinux
- CVE-2022-49164powerpc/tm: Fix more userspace r13 corruptionLinux
- CVE-2022-49161ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probeLinux
- CVE-2022-49158scsi: qla2xxx: Fix warning message due to adisc being flushedLinux
- CVE-2022-49157scsi: qla2xxx: Fix premature hw access after PCI errorLinux
- CVE-2022-49156scsi: qla2xxx: Fix scheduling while atomicLinux
- CVE-2022-49155scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()Linux
- CVE-2022-49153wireguard: socket: free skb in send6 when ipv6 is disabledLinux
- CVE-2022-49152XArray: Fix xas_create_range() when multi-order entry presentLinux
- CVE-2022-49151can: mcba_usb: properly check endpoint typeLinux
- CVE-2022-49150rtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sramLinux
- CVE-2022-49148watch_queue: Free the page array when watch_queue is dismantledLinux
- CVE-2022-49147block: Fix the maximum minor value is blk_alloc_ext_minor()Linux
- CVE-2022-49146virtio: use virtio_device_ready() in virtio_device_restore()Linux
- CVE-2022-49145ACPI: CPPC: Avoid out of bounds access when parsing _CPC dataLinux
- CVE-2022-49144io_uring: fix memory leak of uid in files registrationLinux
- CVE-2022-49141net: dsa: felix: fix possible NULL pointer dereferenceLinux
- CVE-2022-49139Bluetooth: fix null ptr deref on hci_sync_conn_complete_evtLinux
- CVE-2022-49137drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence objLinux
- CVE-2022-49135drm/amd/display: Fix memory leakLinux
- CVE-2022-49134mlxsw: spectrum: Guard against invalid local portsLinux
- CVE-2022-49133drm/amdkfd: svm range restore work deadlock when process exitLinux
- CVE-2022-49132ath11k: pci: fix crash on suspend if board file is not foundLinux
- CVE-2022-49131ath11k: fix kernel panic during unload/load ath11k modulesLinux
- CVE-2022-49130ath11k: mhi: use mhi_sync_power_up()Linux
- CVE-2022-49128drm/bridge: Add missing pm_runtime_put_syncLinux
- CVE-2022-49126scsi: mpi3mr: Fix memory leaksLinux
- CVE-2022-49125drm/sprd: fix potential NULL dereferenceLinux
- CVE-2022-49124x86/mce: Work around an erratum on fast string copy instructionsLinux
- CVE-2022-49123ath11k: Fix frames flush failure caused by deadlockLinux
- CVE-2022-49122dm ioctl: prevent potential spectre v1 gadgetLinux
- CVE-2022-49121scsi: pm8001: Fix tag leaks on errorLinux
- CVE-2022-49120scsi: pm8001: Fix task leak in pm8001_send_abort_all()Linux
- CVE-2022-49119scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()Linux
- CVE-2022-49118scsi: hisi_sas: Free irq vectors in order for v3 HWLinux
- CVE-2022-49117mips: ralink: fix a refcount leak in ill_acc_of_setup()Linux
- CVE-2022-49116Bluetooth: use memset avoid memory leaksLinux
- CVE-2022-49115PCI: endpoint: Fix misused goto labelLinux
- CVE-2022-49113powerpc/secvar: fix refcount leak in format_show()Linux
- CVE-2022-49112mt76: fix monitor mode crash with sdio driverLinux
- CVE-2022-49109ceph: fix inode reference leakage in ceph_get_snapdir()Linux
- CVE-2022-49108clk: mediatek: Fix memory leaks on probeLinux
- CVE-2022-49107ceph: fix memory leak in ceph_readdir when note_last_dentry returns errorLinux
- CVE-2022-49106staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instancesLinux
- CVE-2022-49105staging: wfx: fix an error handling in wfx_init_common()Linux
- CVE-2022-49104staging: vchiq_core: handle NULL result of find_service_by_handleLinux
- CVE-2022-49103NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()Linux
- CVE-2022-49102habanalabs: fix possible memory leak in MMU DR finiLinux
- CVE-2022-49100virtio_console: eliminate anonymous module_init & module_exitLinux
- CVE-2022-49099Drivers: hv: vmbus: Fix initialization of device object in vmbus_device_register()Linux
- CVE-2022-49098Drivers: hv: vmbus: Fix potential crash on module unloadLinux
- CVE-2022-49097NFS: Avoid writeback threads getting stuck in mempool_alloc()Linux
- CVE-2022-49095scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()Linux
- CVE-2022-49091drm/imx: Fix memory leak in imx_pd_connector_get_modesLinux
- CVE-2022-49090arch/arm64: Fix topology initialization for core schedulingLinux
- CVE-2022-49088dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probeLinux
- CVE-2022-49086net: openvswitch: fix leak of nested actionsLinux
- CVE-2022-49083iommu/omap: Fix regression in probe for NULL pointer dereferenceLinux
- CVE-2022-49081highmem: fix checks in __kmap_local_sched_{in,out}Linux
- CVE-2022-49080mm/mempolicy: fix mpol_new leak in shared_policy_replaceLinux
- CVE-2022-49079btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zoneLinux
- CVE-2022-49077mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)Linux
- CVE-2022-49074irqchip/gic-v3: Fix GICR_CTLR.RWP pollingLinux
- CVE-2022-49072gpio: Restrict usage of GPIO chip irq members before initializationLinux
- CVE-2022-49071drm/panel: ili9341: fix optional regulator handlingLinux
- CVE-2022-49070fbdev: Fix unregistering of framebuffers without deviceLinux
- CVE-2022-49069drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bwLinux
- CVE-2022-49068btrfs: release correct delalloc amount in direct IO write pathLinux
- CVE-2022-49067powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bitLinux
- CVE-2022-49066veth: Ensure eth header is in skb's linear partLinux
- CVE-2022-49064cachefiles: unmark inode in use in error pathLinux
- CVE-2022-49061net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-linkLinux
- CVE-2022-49060net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()Linux
- CVE-2022-49057block: null_blk: end timed out poll requestLinux
- CVE-2022-49055drm/amdkfd: Check for potential null return of kmalloc_array()Linux
- CVE-2022-49051net: usb: aqc111: Fix out-of-bounds accesses in RX fixupLinux
- CVE-2022-49050memory: renesas-rpc-if: fix platform-device leak in error pathLinux
- CVE-2022-49049mm/secretmem: fix panic when growing a memfd_secretLinux
- CVE-2022-49046i2c: dev: check return value when calling dev_set_name()Linux
- CVE-2022-49044dm integrity: fix memory corruption when tag_size is less than digest sizeLinux
- CVE-2021-47657drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()Linux
- CVE-2021-47655media: venus: vdec: fixed possible memory leak issueLinux
- CVE-2021-47654samples/landlock: Fix path_list memory leakLinux
- CVE-2021-47652video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()Linux
- CVE-2021-47651soc: qcom: rpmpd: Check for null return of devm_kcallocLinux
- CVE-2021-47650ASoC: soc-compress: prevent the potentially use of null pointerLinux
- CVE-2021-47649udmabuf: validate ubuf->pagecountLinux
- CVE-2021-47648gpu: host1x: Fix a memory leak in 'host1x_remove()'Linux
- CVE-2021-47647clk: qcom: ipq8074: fix PCI-E clock oopsLinux
- CVE-2021-47645media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_comLinux
- CVE-2021-47644media: staging: media: zoran: move videodev allocLinux
- CVE-2021-47643media: ir_toy: free before error exitingLinux
- CVE-2021-47642video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflowLinux
- CVE-2021-47641video: fbdev: cirrusfb: check pixclock to avoid divide by zeroLinux
- CVE-2021-47637ubifs: Fix deadlock in concurrent rename whiteout and inode writebackLinux
- CVE-2021-47633ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111Linux
- CVE-2021-47632powerpc/set_memory: Avoid spinlock recursion in change_page_attr()Linux
- CVE-2021-47631ARM: davinci: da850-evm: Avoid NULL pointer dereferenceLinux
- CVE-2025-0234Out-of-bounds vulnerability in curve segmentation processing of Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic Canon Generic PCL6 V4 Printer Driver · Canon Generic UFR… +1
- CVE-2024-46226A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary JavaScript in the admin
- CVE-2024-50684SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy).
- CVE-2024-52925In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature fOPSWAT MetaDefender Kiosk
- CVE-2024-57423A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid para
- CVE-2025-25462A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote at
- CVE-2025-25791An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via up
- CVE-2025-25792SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php.
- CVE-2025-25793SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php.
- CVE-2025-25794SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php.
- CVE-2025-25796SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_template.php.
- CVE-2025-25797SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_smtp.php.
- CVE-2025-25799SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php.
- CVE-2025-25800SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.
- CVE-2025-25802SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ip.php.
- CVE-2025-25813SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_files.php.
- CVE-2025-25818A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra
- CVE-2025-25827A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via sup