# CVEs published 2025-02-26

790 CVEs were published on February 26, 2025: 27 critical, 185 high. Days are UTC.

- [CVE-2025-1726](https://cve.now/CVE-2025-1726.md): \[#BUG-000172669 ArcGIS Monitor has a security vulnerability\] (CVSS 4.3, Esri ArcGIS Monitor)
- [CVE-2025-1634](https://cve.now/CVE-2025-1634.md): Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout (CVSS 7.5, quarkus-resteasy · Red Hat Build of Apache Camel 4.8 for… +5)
- [CVE-2025-0941](https://cve.now/CVE-2025-0941.md): MET ONE 3400+ Potential Credential Exposure (CVSS 5.8, Beckman Coulter Life Sciences MET ONE 3400+)
- [CVE-2025-20119](https://cve.now/CVE-2025-20119.md): Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability (CVSS 6.0, Cisco Application Policy Infrastructure Controller)
- [CVE-2025-20118](https://cve.now/CVE-2025-20118.md): Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability (CVSS 4.4, Cisco Application Policy Infrastructure Controller)
- [CVE-2025-20161](https://cve.now/CVE-2025-20161.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 5.1, Cisco NX-OS Software)
- [CVE-2025-20117](https://cve.now/CVE-2025-20117.md): Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability (CVSS 5.1, Cisco Application Policy Infrastructure Controller)
- [CVE-2025-20116](https://cve.now/CVE-2025-20116.md): Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Application Policy Infrastructure Controller)
- [CVE-2025-20111](https://cve.now/CVE-2025-20111.md): Cisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet Denial of Service Vulnerability (CVSS 7.4, Cisco NX-OS Software)
- [CVE-2022-49732](https://cve.now/CVE-2022-49732.md): sock: redo the psock vs ULP protection check (no CVSS, Linux)
- [CVE-2025-1716](https://cve.now/CVE-2025-1716.md): picklescan - Security scanning bypass via 'pip main' (CVSS 5.3, mmaitre314 picklescan · picklescan)
- [CVE-2025-1249](https://cve.now/CVE-2025-1249.md): WordPress Events Manager plugin \<= 6.6.4.1 - Broken Access Control vulnerability (CVSS 5.3, Marcus (aka @msykes) Events Manager)
- [CVE-2025-0719](https://cve.now/CVE-2025-0719.md): IBM Cloud Pak for Data cross-site scripting (CVSS 6.1, IBM Cloud Pak for Data)
- [CVE-2025-26925](https://cve.now/CVE-2025-26925.md): WordPress Admin Menu Manager plugin \<= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Required Admin Menu Manager)
- [CVE-2024-47051](https://cve.now/CVE-2024-47051.md): Remote Code Execution & File Deletion in Asset Uploads (CVSS 9.1, mautic/core)
- [CVE-2024-47053](https://cve.now/CVE-2024-47053.md): Improper Authorization in Reporting API (CVSS 7.7, mautic/core)
- [CVE-2022-25773](https://cve.now/CVE-2022-25773.md): Relative Path Traversal in assets file upload (CVSS 4.3, mautic/core)
- [CVE-2024-6810](https://cve.now/CVE-2024-6810.md): Quiz Organizer \<= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4, quizorganizer Quiz Organizer)
- [CVE-2025-0731](https://cve.now/CVE-2025-0731.md): SMA: Sunny Portal Remote Code Execution (CVSS 6.5, SMA www.sunnyportal.com)
- [CVE-2025-26698](https://cve.now/CVE-2025-26698.md): Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. (CVSS 2.7, J’s Communication Co. RevoWorks SCVX · J’s Communication Co…)
- [CVE-2025-1517](https://cve.now/CVE-2025-1517.md): Sina Extension for Elementor \<= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text, Countdown Widget, and Login Form Shortcodes (CVSS 6.4, shaonsina Sina Extension for Elementor)
- [CVE-2024-13560](https://cve.now/CVE-2024-13560.md): Subscriptions & Memberships for PayPal \<= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion (CVSS 4.3, scottpaterson Subscriptions & Memberships for PayPal)
- [CVE-2024-13803](https://cve.now/CVE-2024-13803.md): Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates \<= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpdevteam Gutenberg Essential Blocks – Page Builder for Gut…)
- [CVE-2024-13678](https://cve.now/CVE-2024-13678.md): R3W Instafeed \<= 1.0 - Reflected XSS (CVSS 6.1, R3W InstaFeed)
- [CVE-2024-13669](https://cve.now/CVE-2024-13669.md): CalendApp \<= 1.1 - Reflected XSS (CVSS 6.1, CalendApp)
- [CVE-2024-13634](https://cve.now/CVE-2024-13634.md): Post Sync \<= 1.1 - Reflected XSS (CVSS 6.1, Post Sync)
- [CVE-2024-13633](https://cve.now/CVE-2024-13633.md): Simple Catalogue \<= 1.0.2 - Reflected XSS (CVSS 7.1, Simple catalogue)
- [CVE-2024-13632](https://cve.now/CVE-2024-13632.md): WP Extra Fields \<= 1.0.1 - Reflected XSS (CVSS 7.1, WP Extra Fields)
- [CVE-2024-13631](https://cve.now/CVE-2024-13631.md): OM Stripe \<= 02.00.00 - Reflected XSS (CVSS 7.1, Om Stripe)
- [CVE-2024-13630](https://cve.now/CVE-2024-13630.md): News List \<= 1.0 - Reflected XSS (CVSS 6.1, NewsTicker)
- [CVE-2024-13629](https://cve.now/CVE-2024-13629.md): Pushbiz \<= 1.0 - Reflected XSS (CVSS 6.1, pushBIZ)
- [CVE-2024-13628](https://cve.now/CVE-2024-13628.md): WP Pricing Table \<= 1.1 - Reflected XSS (CVSS 6.1, WP Pricing Table)
- [CVE-2024-13624](https://cve.now/CVE-2024-13624.md): WPMovieLibrary \<= 2.1.4.8 - Reflected XSS (CVSS 7.1, WPMovieLibrary)
- [CVE-2024-13571](https://cve.now/CVE-2024-13571.md): Post Timeline \< 2.3.10 - Reflected XSS (CVSS 7.1, Post Timeline)
- [CVE-2024-13113](https://cve.now/CVE-2024-13113.md): Countdown Timer for Elementor \< 1.3.7 - Contributor+ Stored XSS (CVSS 5.9, Countdown Timer for Elementor)
- [CVE-2024-12878](https://cve.now/CVE-2024-12878.md): Custom Block Builder – Lazy Blocks \< 3.8.3 - Reflected XSS (CVSS 7.1, Custom Block Builder)
- [CVE-2024-12737](https://cve.now/CVE-2024-12737.md): WP BASE Booking of Appointments, Services and Events \< 5.0.0 - Reflected XSS (CVSS 6.1, WP BASE Booking of Appointments, Services and Events)
- [CVE-2024-10563](https://cve.now/CVE-2024-10563.md): WooCommerce Cart Count Shortcode \< 1.1.0 - Contributor+ XSS (CVSS 5.4, WooCommerce Cart Count Shortcode)
- [CVE-2024-10483](https://cve.now/CVE-2024-10483.md): SimplePress Forum \< 6.10.11 - Reflected XSS (CVSS 7.1, Simple:Press Forum)
- [CVE-2024-10152](https://cve.now/CVE-2024-10152.md): Simple Certain Time to Show Content \< 1.3.1 - Reflected XSS (CVSS 7.1, Simple Certain Time to Show Content)
- [CVE-2024-39441](https://cve.now/CVE-2024-39441.md): In wifi display, there is a possible missing permission check. (CVSS 7.1, Unisoc (Shanghai) Technologies Co. T310/T606/T612/T616/T610…)
- [CVE-2024-12434](https://cve.now/CVE-2024-12434.md): SureMembers \<= 1.10.6 - Sensitive Information Exposure (CVSS 5.3, Brainstorm Force SureMembers)
- [CVE-2025-22868](https://cve.now/CVE-2025-22868.md): Unexpected memory consumption during token parsing in golang.org/x/oauth2 (CVSS 7.5, golang.org/x/oauth2/jws · golang.org/x/oauth2)
- [CVE-2025-22869](https://cve.now/CVE-2025-22869.md): Potential denial of service in golang.org/x/crypto (CVSS 7.5, golang.org/x/crypto/ssh · golang.org/x/crypto)
- [CVE-2022-49731](https://cve.now/CVE-2022-49731.md): ata: libata-core: fix NULL pointer deref in ata\_host\_alloc\_pinfo() (CVSS 5.5, Linux)
- [CVE-2022-49729](https://cve.now/CVE-2022-49729.md): nfc: nfcmrvl: Fix memory leak in nfcmrvl\_play\_deferred (CVSS 5.5, Linux)
- [CVE-2022-49728](https://cve.now/CVE-2022-49728.md): ipv6: Fix signed integer overflow in \_\_ip6\_append\_data (no CVSS, Linux)
- [CVE-2022-49727](https://cve.now/CVE-2022-49727.md): ipv6: Fix signed integer overflow in l2tp\_ip6\_sendmsg (CVSS 5.5, Linux)
- [CVE-2022-49726](https://cve.now/CVE-2022-49726.md): clocksource: hyper-v: unexport \_\_init-annotated hv\_init\_clocksource() (no CVSS, Linux)
- [CVE-2022-49725](https://cve.now/CVE-2022-49725.md): i40e: Fix call trace in setup\_tx\_descriptors (CVSS 7.8, Linux)
- [CVE-2022-49724](https://cve.now/CVE-2022-49724.md): tty: goldfish: Fix free\_irq() on remove (no CVSS, Linux)
- [CVE-2022-49723](https://cve.now/CVE-2022-49723.md): drm/i915/reset: Fix error\_state\_read ptr + offset use (no CVSS, Linux)
- [CVE-2022-49722](https://cve.now/CVE-2022-49722.md): ice: Fix memory corruption in VF driver (CVSS 7.8, Linux)
- [CVE-2022-49721](https://cve.now/CVE-2022-49721.md): arm64: ftrace: consistently handle PLTs. (no CVSS, Linux)
- [CVE-2022-49720](https://cve.now/CVE-2022-49720.md): block: Fix handling of offline queues in blk\_mq\_alloc\_request\_hctx() (CVSS 7.8, Linux)
- [CVE-2022-49719](https://cve.now/CVE-2022-49719.md): irqchip/gic/realview: Fix refcount leak in realview\_gic\_of\_init (CVSS 5.5, Linux)
- [CVE-2022-49718](https://cve.now/CVE-2022-49718.md): irqchip/apple-aic: Fix refcount leak in aic\_of\_ic\_init (CVSS 5.5, Linux)
- [CVE-2022-49717](https://cve.now/CVE-2022-49717.md): irqchip/apple-aic: Fix refcount leak in build\_fiq\_affinity (CVSS 5.5, Linux)
- [CVE-2022-49716](https://cve.now/CVE-2022-49716.md): irqchip/gic-v3: Fix error handling in gic\_populate\_ppi\_partitions (CVSS 5.5, Linux)
- [CVE-2022-49715](https://cve.now/CVE-2022-49715.md): irqchip/gic-v3: Fix refcount leak in gic\_populate\_ppi\_partitions (CVSS 5.5, Linux)
- [CVE-2022-49714](https://cve.now/CVE-2022-49714.md): irqchip/realtek-rtl: Fix refcount leak in map\_interrupts (CVSS 5.5, Linux)
- [CVE-2022-49713](https://cve.now/CVE-2022-49713.md): usb: dwc2: Fix memory leak in dwc2\_hcd\_init (CVSS 5.5, Linux)
- [CVE-2022-49712](https://cve.now/CVE-2022-49712.md): usb: gadget: lpc32xx\_udc: Fix refcount leak in lpc32xx\_udc\_probe (CVSS 5.5, Linux)
- [CVE-2022-49711](https://cve.now/CVE-2022-49711.md): bus: fsl-mc-bus: fix KASAN use-after-free in fsl\_mc\_bus\_remove() (CVSS 7.8, Linux)
- [CVE-2022-49710](https://cve.now/CVE-2022-49710.md): dm mirror log: round up region bitmap size to BITS\_PER\_LONG (no CVSS, Linux)
- [CVE-2022-49709](https://cve.now/CVE-2022-49709.md): cfi: Fix \_\_cfi\_slowpath\_diag RCU usage with cpuidle (no CVSS, Linux)
- [CVE-2022-49708](https://cve.now/CVE-2022-49708.md): ext4: fix bug\_on ext4\_mb\_use\_inode\_pa (no CVSS, Linux)
- [CVE-2022-49707](https://cve.now/CVE-2022-49707.md): ext4: add reserved GDT blocks check (CVSS 5.5, Linux)
- [CVE-2022-49706](https://cve.now/CVE-2022-49706.md): zonefs: fix zonefs\_iomap\_begin() for reads (no CVSS, Linux)
- [CVE-2022-49705](https://cve.now/CVE-2022-49705.md): 9p: fix fid refcount leak in v9fs\_vfs\_atomic\_open\_dotl (CVSS 5.5, Linux)
- [CVE-2022-49704](https://cve.now/CVE-2022-49704.md): 9p: fix fid refcount leak in v9fs\_vfs\_get\_link (CVSS 5.5, Linux)
- [CVE-2022-49703](https://cve.now/CVE-2022-49703.md): scsi: ibmvfc: Store vhost pointer during subcrq allocation (CVSS 5.5, Linux)
- [CVE-2022-49702](https://cve.now/CVE-2022-49702.md): btrfs: fix hang during unmount when block group reclaim task is running (no CVSS, Linux)
- [CVE-2022-49701](https://cve.now/CVE-2022-49701.md): scsi: ibmvfc: Allocate/free queue resource only during probe/remove (CVSS 7.8, Linux)
- [CVE-2022-49700](https://cve.now/CVE-2022-49700.md): mm/slub: add missing TID updates on slab deactivation (CVSS 7.8, Linux)
- [CVE-2022-49699](https://cve.now/CVE-2022-49699.md): filemap: Handle sibling entries in filemap\_get\_read\_batch() (no CVSS, Linux)
- [CVE-2022-49698](https://cve.now/CVE-2022-49698.md): netfilter: use get\_random\_u32 instead of prandom (no CVSS, Linux)
- [CVE-2022-49697](https://cve.now/CVE-2022-49697.md): bpf: Fix request\_sock leak in sk lookup helpers (no CVSS, Linux)
- [CVE-2022-49696](https://cve.now/CVE-2022-49696.md): tipc: fix use-after-free Read in tipc\_named\_reinit (CVSS 7.8, Linux)
- [CVE-2022-49695](https://cve.now/CVE-2022-49695.md): igb: fix a use-after-free issue in igb\_clean\_tx\_ring (CVSS 7.8, Linux)
- [CVE-2022-49694](https://cve.now/CVE-2022-49694.md): block: disable the elevator int del\_gendisk (CVSS 7.8, Linux)
- [CVE-2022-49693](https://cve.now/CVE-2022-49693.md): drm/msm/mdp4: Fix refcount leak in mdp4\_modeset\_init\_intf (CVSS 5.5, Linux)
- [CVE-2022-49692](https://cve.now/CVE-2022-49692.md): net: phy: at803x: fix NULL pointer dereference on AR9331 PHY (CVSS 5.5, Linux)
- [CVE-2022-49691](https://cve.now/CVE-2022-49691.md): erspan: do not assume transport header is always set (no CVSS, Linux)
- [CVE-2022-49688](https://cve.now/CVE-2022-49688.md): afs: Fix dynamic root getattr (no CVSS, Linux)
- [CVE-2022-49687](https://cve.now/CVE-2022-49687.md): virtio\_net: fix xdp\_rxq\_info bug after suspend/resume (no CVSS, Linux)
- [CVE-2022-49686](https://cve.now/CVE-2022-49686.md): usb: gadget: uvc: fix list double add in uvcg\_video\_pump (no CVSS, Linux)
- [CVE-2022-49685](https://cve.now/CVE-2022-49685.md): iio: trigger: sysfs: fix use-after-free on remove (CVSS 7.8, Linux)
- [CVE-2022-49684](https://cve.now/CVE-2022-49684.md): iio: adc: aspeed: Fix refcount leak in aspeed\_adc\_set\_trim\_data (CVSS 5.5, Linux)
- [CVE-2022-49683](https://cve.now/CVE-2022-49683.md): iio: adc: adi-axi-adc: Fix refcount leak in adi\_axi\_adc\_attach\_client (CVSS 5.5, Linux)
- [CVE-2022-49682](https://cve.now/CVE-2022-49682.md): xtensa: Fix refcount leak bug in time.c (CVSS 5.5, Linux)
- [CVE-2022-49681](https://cve.now/CVE-2022-49681.md): xtensa: xtfpga: Fix refcount leak bug in setup (CVSS 5.5, Linux)
- [CVE-2022-49680](https://cve.now/CVE-2022-49680.md): ARM: exynos: Fix refcount leak in exynos\_map\_pmu (CVSS 5.5, Linux)
- [CVE-2022-49679](https://cve.now/CVE-2022-49679.md): ARM: Fix refcount leak in axxia\_boot\_secondary (CVSS 5.5, Linux)
- [CVE-2022-49678](https://cve.now/CVE-2022-49678.md): soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb\_pm\_probe (CVSS 5.5, Linux)
- [CVE-2022-49677](https://cve.now/CVE-2022-49677.md): ARM: cns3xxx: Fix refcount leak in cns3xxx\_init (CVSS 5.5, Linux)
- [CVE-2022-49676](https://cve.now/CVE-2022-49676.md): memory: samsung: exynos5422-dmc: Fix refcount leak in of\_get\_dram\_timings (CVSS 5.5, Linux)
- [CVE-2022-49675](https://cve.now/CVE-2022-49675.md): tick/nohz: unexport \_\_init-annotated tick\_nohz\_full\_setup() (no CVSS, Linux)
- [CVE-2022-49674](https://cve.now/CVE-2022-49674.md): dm raid: fix accesses beyond end of raid member array (no CVSS, Linux)
- [CVE-2022-49673](https://cve.now/CVE-2022-49673.md): dm raid: fix KASAN warning in raid5\_add\_disks (no CVSS, Linux)
- [CVE-2022-49672](https://cve.now/CVE-2022-49672.md): net: tun: unlink NAPI from device on destruction (CVSS 7.8, Linux)
- [CVE-2022-49671](https://cve.now/CVE-2022-49671.md): RDMA/cm: Fix memory leak in ib\_cm\_insert\_listen (CVSS 5.5, Linux)
- [CVE-2022-49670](https://cve.now/CVE-2022-49670.md): linux/dim: Fix divide by 0 in RDMA DIM (CVSS 7.5, Linux)
- [CVE-2022-49669](https://cve.now/CVE-2022-49669.md): mptcp: fix race on unaccepted mptcp sockets (CVSS 7.8, Linux)
- [CVE-2022-49668](https://cve.now/CVE-2022-49668.md): PM / devfreq: exynos-ppmu: Fix refcount leak in of\_get\_devfreq\_events (CVSS 5.5, Linux)
- [CVE-2022-49667](https://cve.now/CVE-2022-49667.md): net: bonding: fix use-after-free after 802.3ad slave unbind (CVSS 7.8, Linux)
- [CVE-2022-49666](https://cve.now/CVE-2022-49666.md): powerpc/memhotplug: Add add\_pages override for PPC (no CVSS, Linux)
- [CVE-2022-49665](https://cve.now/CVE-2022-49665.md): platform/x86: thinkpad\_acpi: Fix a memory leak of EFCH MMIO resource (no CVSS, Linux)
- [CVE-2022-49664](https://cve.now/CVE-2022-49664.md): tipc: move bc link creation back to tipc\_node\_create (CVSS 7.5, Linux)
- [CVE-2022-49663](https://cve.now/CVE-2022-49663.md): tunnels: do not assume mac header is set in skb\_tunnel\_check\_pmtu() (no CVSS, Linux)
- [CVE-2022-49662](https://cve.now/CVE-2022-49662.md): ipv6: fix lockdep splat in in6\_dump\_addrs() (no CVSS, Linux)
- [CVE-2022-49661](https://cve.now/CVE-2022-49661.md): can: gs\_usb: gs\_usb\_open/close(): fix memory leak (no CVSS, Linux)
- [CVE-2022-49659](https://cve.now/CVE-2022-49659.md): can: m\_can: m\_can\_{read\_fifo,echo\_tx\_event}(): shift timestamp to full 32 bits (no CVSS, Linux)
- [CVE-2022-49658](https://cve.now/CVE-2022-49658.md): bpf: Fix insufficient bounds propagation from adjust\_scalar\_min\_max\_vals (no CVSS, Linux)
- [CVE-2022-49657](https://cve.now/CVE-2022-49657.md): usbnet: fix memory leak in error case (CVSS 5.5, Linux)
- [CVE-2022-49656](https://cve.now/CVE-2022-49656.md): ARM: meson: Fix refcount leak in meson\_smp\_prepare\_cpus (CVSS 5.5, Linux)
- [CVE-2022-49655](https://cve.now/CVE-2022-49655.md): fscache: Fix invalidation/lookup race (no CVSS, Linux)
- [CVE-2022-49654](https://cve.now/CVE-2022-49654.md): net: dsa: qca8k: reset cpu port on MTU change (no CVSS, Linux)
- [CVE-2022-49653](https://cve.now/CVE-2022-49653.md): i2c: piix4: Fix a memory leak in the EFCH MMIO support (CVSS 5.5, Linux)
- [CVE-2022-49652](https://cve.now/CVE-2022-49652.md): dmaengine: ti: Fix refcount leak in ti\_dra7\_xbar\_route\_allocate (CVSS 5.5, Linux)
- [CVE-2022-49651](https://cve.now/CVE-2022-49651.md): srcu: Tighten cleanup\_srcu\_struct() GP checks (CVSS 7.8, Linux)
- [CVE-2022-49650](https://cve.now/CVE-2022-49650.md): dmaengine: qcom: bam\_dma: fix runtime PM underflow (no CVSS, Linux)
- [CVE-2022-49649](https://cve.now/CVE-2022-49649.md): xen/netback: avoid entering xenvif\_rx\_next\_skb() with an empty rx queue (CVSS 5.5, Linux)
- [CVE-2022-49648](https://cve.now/CVE-2022-49648.md): tracing/histograms: Fix memory leak problem (CVSS 5.5, Linux)
- [CVE-2022-49647](https://cve.now/CVE-2022-49647.md): cgroup: Use separate src/dst nodes when preloading css\_sets for migration (CVSS 7.8, Linux)
- [CVE-2022-49646](https://cve.now/CVE-2022-49646.md): wifi: mac80211: fix queue selection for mesh/OCB interfaces (no CVSS, Linux)
- [CVE-2022-49645](https://cve.now/CVE-2022-49645.md): drm/panfrost: Fix shrinker list corruption by madvise IOCTL (CVSS 7.8, Linux)
- [CVE-2022-49644](https://cve.now/CVE-2022-49644.md): drm/i915: fix a possible refcount leak in intel\_dp\_add\_mst\_connector() (CVSS 5.5, Linux)
- [CVE-2022-49643](https://cve.now/CVE-2022-49643.md): ima: Fix a potential integer overflow in ima\_appraise\_measurement (CVSS 7.1, Linux)
- [CVE-2022-49642](https://cve.now/CVE-2022-49642.md): net: stmmac: dwc-qos: Disable split header for Tegra194 (no CVSS, Linux)
- [CVE-2022-49641](https://cve.now/CVE-2022-49641.md): sysctl: Fix data races in proc\_douintvec(). (CVSS 4.7, Linux)
- [CVE-2022-49640](https://cve.now/CVE-2022-49640.md): sysctl: Fix data races in proc\_douintvec\_minmax(). (CVSS 4.7, Linux)
- [CVE-2022-49639](https://cve.now/CVE-2022-49639.md): cipso: Fix data-races around sysctl. (CVSS 4.7, Linux)
- [CVE-2022-49638](https://cve.now/CVE-2022-49638.md): icmp: Fix data-races around sysctl. (CVSS 4.7, Linux)
- [CVE-2022-49637](https://cve.now/CVE-2022-49637.md): ipv4: Fix a data-race around sysctl\_fib\_sync\_mem. (CVSS 4.7, Linux)
- [CVE-2022-49636](https://cve.now/CVE-2022-49636.md): vlan: fix memory leak in vlan\_newlink() (no CVSS, Linux)
- [CVE-2022-49635](https://cve.now/CVE-2022-49635.md): drm/i915/selftests: fix subtraction overflow bug (no CVSS, Linux)
- [CVE-2022-49634](https://cve.now/CVE-2022-49634.md): sysctl: Fix data-races in proc\_dou8vec\_minmax(). (CVSS 4.7, Linux)
- [CVE-2022-49633](https://cve.now/CVE-2022-49633.md): icmp: Fix data-races around sysctl\_icmp\_echo\_enable\_probe. (CVSS 4.7, Linux)
- [CVE-2022-49632](https://cve.now/CVE-2022-49632.md): icmp: Fix a data-race around sysctl\_icmp\_errors\_use\_inbound\_ifaddr. (CVSS 4.7, Linux)
- [CVE-2022-49631](https://cve.now/CVE-2022-49631.md): raw: Fix a data-race around sysctl\_raw\_l3mdev\_accept. (CVSS 4.7, Linux)
- [CVE-2022-49630](https://cve.now/CVE-2022-49630.md): tcp: Fix a data-race around sysctl\_tcp\_ecn\_fallback. (CVSS 4.7, Linux)
- [CVE-2022-49629](https://cve.now/CVE-2022-49629.md): nexthop: Fix data-races around nexthop\_compat\_mode. (CVSS 4.7, Linux)
- [CVE-2022-49628](https://cve.now/CVE-2022-49628.md): net: stmmac: fix leaks in probe (no CVSS, Linux)
- [CVE-2022-49627](https://cve.now/CVE-2022-49627.md): ima: Fix potential memory leak in ima\_init\_crypto() (CVSS 5.5, Linux)
- [CVE-2022-49626](https://cve.now/CVE-2022-49626.md): sfc: fix use after free when disabling sriov (CVSS 7.8, Linux)
- [CVE-2022-49625](https://cve.now/CVE-2022-49625.md): sfc: fix kernel panic when creating VF (no CVSS, Linux)
- [CVE-2022-49624](https://cve.now/CVE-2022-49624.md): net: atlantic: remove aq\_nic\_deinit() when resume (no CVSS, Linux)
- [CVE-2022-49623](https://cve.now/CVE-2022-49623.md): powerpc/xive/spapr: correct bitmap allocation size (CVSS 7.1, Linux)
- [CVE-2022-49622](https://cve.now/CVE-2022-49622.md): netfilter: nf\_tables: avoid skb access on nf\_stolen (CVSS 7.8, Linux)
- [CVE-2022-49621](https://cve.now/CVE-2022-49621.md): cpufreq: pmac32-cpufreq: Fix refcount leak bug (CVSS 5.5, Linux)
- [CVE-2022-49620](https://cve.now/CVE-2022-49620.md): net: tipc: fix possible refcount leak in tipc\_sk\_create() (CVSS 5.5, Linux)
- [CVE-2022-49619](https://cve.now/CVE-2022-49619.md): net: sfp: fix memory leak in sfp\_probe() (CVSS 5.5, Linux)
- [CVE-2022-49618](https://cve.now/CVE-2022-49618.md): pinctrl: aspeed: Fix potential NULL dereference in aspeed\_pinmux\_set\_mux() (CVSS 5.5, Linux)
- [CVE-2022-49617](https://cve.now/CVE-2022-49617.md): ASoC: Intel: sof\_sdw: handle errors on card registration (no CVSS, Linux)
- [CVE-2022-49616](https://cve.now/CVE-2022-49616.md): ASoC: rt7\*-sdw: harden jack\_detect\_handler (no CVSS, Linux)
- [CVE-2022-49615](https://cve.now/CVE-2022-49615.md): ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error (CVSS 5.5, Linux)
- [CVE-2022-49613](https://cve.now/CVE-2022-49613.md): serial: 8250: Fix PM usage\_count for console handover (no CVSS, Linux)
- [CVE-2022-49612](https://cve.now/CVE-2022-49612.md): power: supply: core: Fix boundary conditions in interpolation (no CVSS, Linux)
- [CVE-2022-49611](https://cve.now/CVE-2022-49611.md): x86/speculation: Fill RSB on vmexit for IBRS (no CVSS, Linux)
- [CVE-2022-49610](https://cve.now/CVE-2022-49610.md): KVM: VMX: Prevent RSB underflow before vmenter (no CVSS, Linux)
- [CVE-2022-49609](https://cve.now/CVE-2022-49609.md): power/reset: arm-versatile: Fix refcount leak in versatile\_reboot\_probe (CVSS 5.5, Linux)
- [CVE-2022-49608](https://cve.now/CVE-2022-49608.md): pinctrl: ralink: Check for null return of devm\_kcalloc (CVSS 5.5, Linux)
- [CVE-2022-49607](https://cve.now/CVE-2022-49607.md): perf/core: Fix data race between perf\_event\_set\_output() and perf\_mmap\_close() (CVSS 4.7, Linux)
- [CVE-2022-49606](https://cve.now/CVE-2022-49606.md): RDMA/irdma: Fix sleep from invalid context BUG (no CVSS, Linux)
- [CVE-2022-49605](https://cve.now/CVE-2022-49605.md): igc: Reinstate IGC\_REMOVED logic and implement it properly (no CVSS, Linux)
- [CVE-2022-49604](https://cve.now/CVE-2022-49604.md): ip: Fix data-races around sysctl\_ip\_fwd\_use\_pmtu. (CVSS 4.7, Linux)
- [CVE-2022-49603](https://cve.now/CVE-2022-49603.md): ip: Fix data-races around sysctl\_ip\_fwd\_update\_priority. (CVSS 4.7, Linux)
- [CVE-2022-49602](https://cve.now/CVE-2022-49602.md): ip: Fix a data-race around sysctl\_fwmark\_reflect. (CVSS 4.7, Linux)
- [CVE-2022-49601](https://cve.now/CVE-2022-49601.md): tcp/dccp: Fix a data-race around sysctl\_tcp\_fwmark\_accept. (CVSS 4.7, Linux)
- [CVE-2022-49600](https://cve.now/CVE-2022-49600.md): ip: Fix a data-race around sysctl\_ip\_autobind\_reuse. (CVSS 4.7, Linux)
- [CVE-2022-49599](https://cve.now/CVE-2022-49599.md): tcp: Fix data-races around sysctl\_tcp\_l3mdev\_accept. (CVSS 4.7, Linux)
- [CVE-2022-49598](https://cve.now/CVE-2022-49598.md): tcp: Fix data-races around sysctl\_tcp\_mtu\_probing. (CVSS 4.7, Linux)
- [CVE-2022-49597](https://cve.now/CVE-2022-49597.md): tcp: Fix data-races around sysctl\_tcp\_base\_mss. (CVSS 4.7, Linux)
- [CVE-2022-49596](https://cve.now/CVE-2022-49596.md): tcp: Fix data-races around sysctl\_tcp\_min\_snd\_mss. (CVSS 4.7, Linux)
- [CVE-2022-49595](https://cve.now/CVE-2022-49595.md): tcp: Fix a data-race around sysctl\_tcp\_probe\_threshold. (CVSS 4.7, Linux)
- [CVE-2022-49594](https://cve.now/CVE-2022-49594.md): tcp: Fix a data-race around sysctl\_tcp\_mtu\_probe\_floor. (CVSS 4.7, Linux)
- [CVE-2022-49593](https://cve.now/CVE-2022-49593.md): tcp: Fix a data-race around sysctl\_tcp\_probe\_interval. (CVSS 4.7, Linux)
- [CVE-2022-49592](https://cve.now/CVE-2022-49592.md): net: stmmac: fix dma queue left shift overflow issue (no CVSS, Linux)
- [CVE-2022-49591](https://cve.now/CVE-2022-49591.md): net: dsa: microchip: ksz\_common: Fix refcount leak bug (CVSS 5.5, Linux)
- [CVE-2022-49590](https://cve.now/CVE-2022-49590.md): igmp: Fix data-races around sysctl\_igmp\_llm\_reports. (CVSS 4.7, Linux)
- [CVE-2022-49589](https://cve.now/CVE-2022-49589.md): igmp: Fix data-races around sysctl\_igmp\_qrv. (CVSS 4.7, Linux)
- [CVE-2022-49588](https://cve.now/CVE-2022-49588.md): tcp: Fix data-races around sysctl\_tcp\_migrate\_req. (CVSS 4.7, Linux)
- [CVE-2022-49587](https://cve.now/CVE-2022-49587.md): tcp: Fix a data-race around sysctl\_tcp\_notsent\_lowat. (CVSS 4.7, Linux)
- [CVE-2022-49586](https://cve.now/CVE-2022-49586.md): tcp: Fix data-races around sysctl\_tcp\_fastopen. (CVSS 4.7, Linux)
- [CVE-2022-49585](https://cve.now/CVE-2022-49585.md): tcp: Fix data-races around sysctl\_tcp\_fastopen\_blackhole\_timeout. (CVSS 4.7, Linux)
- [CVE-2022-49584](https://cve.now/CVE-2022-49584.md): ixgbe: Add locking to prevent panic when setting sriov\_numvfs to zero (no CVSS, Linux)
- [CVE-2022-49583](https://cve.now/CVE-2022-49583.md): iavf: Fix handling of dummy receive descriptors (CVSS 5.5, Linux)
- [CVE-2022-49582](https://cve.now/CVE-2022-49582.md): net: dsa: fix NULL pointer dereference in dsa\_port\_reset\_vlan\_filtering (CVSS 5.5, Linux)
- [CVE-2022-49581](https://cve.now/CVE-2022-49581.md): be2net: Fix buffer overflow in be\_get\_module\_eeprom (CVSS 7.8, Linux)
- [CVE-2022-49580](https://cve.now/CVE-2022-49580.md): ipv4: Fix a data-race around sysctl\_fib\_multipath\_use\_neigh. (CVSS 4.7, Linux)
- [CVE-2022-49579](https://cve.now/CVE-2022-49579.md): ipv4: Fix data-races around sysctl\_fib\_multipath\_hash\_policy. (CVSS 4.7, Linux)
- [CVE-2022-49578](https://cve.now/CVE-2022-49578.md): ip: Fix data-races around sysctl\_ip\_prot\_sock. (CVSS 4.7, Linux)
- [CVE-2022-49577](https://cve.now/CVE-2022-49577.md): udp: Fix a data-race around sysctl\_udp\_l3mdev\_accept. (CVSS 4.7, Linux)
- [CVE-2022-49576](https://cve.now/CVE-2022-49576.md): ipv4: Fix data-races around sysctl\_fib\_multipath\_hash\_fields. (CVSS 4.7, Linux)
- [CVE-2022-49575](https://cve.now/CVE-2022-49575.md): tcp: Fix a data-race around sysctl\_tcp\_thin\_linear\_timeouts. (CVSS 4.7, Linux)
- [CVE-2022-49574](https://cve.now/CVE-2022-49574.md): tcp: Fix data-races around sysctl\_tcp\_recovery. (CVSS 4.7, Linux)
- [CVE-2022-49573](https://cve.now/CVE-2022-49573.md): tcp: Fix a data-race around sysctl\_tcp\_early\_retrans. (CVSS 4.7, Linux)
- [CVE-2022-49572](https://cve.now/CVE-2022-49572.md): tcp: Fix data-races around sysctl\_tcp\_slow\_start\_after\_idle. (CVSS 4.7, Linux)
- [CVE-2022-49571](https://cve.now/CVE-2022-49571.md): tcp: Fix data-races around sysctl\_tcp\_max\_reordering. (CVSS 4.7, Linux)
- [CVE-2022-49570](https://cve.now/CVE-2022-49570.md): gpio: gpio-xilinx: Fix integer overflow (CVSS 5.5, Linux)
- [CVE-2022-49569](https://cve.now/CVE-2022-49569.md): spi: bcm2835: bcm2835\_spi\_handle\_err(): fix NULL pointer deref for non DMA transfers (CVSS 5.5, Linux)
- [CVE-2022-49568](https://cve.now/CVE-2022-49568.md): KVM: Don't null dereference ops-\>destroy (CVSS 5.5, Linux)
- [CVE-2022-49567](https://cve.now/CVE-2022-49567.md): mm/mempolicy: fix uninit-value in mpol\_rebind\_policy() (CVSS 5.5, Linux)
- [CVE-2022-49566](https://cve.now/CVE-2022-49566.md): crypto: qat - fix memory leak in RSA (CVSS 5.5, Linux)
- [CVE-2022-49565](https://cve.now/CVE-2022-49565.md): perf/x86/intel/lbr: Fix unchecked MSR access error on HSW (no CVSS, Linux)
- [CVE-2022-49564](https://cve.now/CVE-2022-49564.md): crypto: qat - add param check for DH (CVSS 7.8, Linux)
- [CVE-2022-49563](https://cve.now/CVE-2022-49563.md): crypto: qat - add param check for RSA (CVSS 7.8, Linux)
- [CVE-2021-4453](https://cve.now/CVE-2021-4453.md): drm/amd/pm: fix a potential gpu\_metrics\_table memory leak (CVSS 5.5, Linux)
- [CVE-2022-49562](https://cve.now/CVE-2022-49562.md): KVM: x86: Use \_\_try\_cmpxchg\_user() to update guest PTE A/D bits (CVSS 7.8, Linux)
- [CVE-2022-49561](https://cve.now/CVE-2022-49561.md): netfilter: conntrack: re-fetch conntrack after insertion (CVSS 9.8, Linux)
- [CVE-2022-49560](https://cve.now/CVE-2022-49560.md): exfat: check if cluster num is valid (CVSS 7.8, Linux)
- [CVE-2022-49559](https://cve.now/CVE-2022-49559.md): KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 (no CVSS, Linux)
- [CVE-2022-49558](https://cve.now/CVE-2022-49558.md): netfilter: nf\_tables: double hook unregistration in netns path (no CVSS, Linux)
- [CVE-2022-49557](https://cve.now/CVE-2022-49557.md): x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm\_xsave) (CVSS 7.8, Linux)
- [CVE-2022-49556](https://cve.now/CVE-2022-49556.md): KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak (no CVSS, Linux)
- [CVE-2022-49555](https://cve.now/CVE-2022-49555.md): Bluetooth: hci\_qca: Use del\_timer\_sync() before freeing (CVSS 7.8, Linux)
- [CVE-2022-49554](https://cve.now/CVE-2022-49554.md): zsmalloc: fix races between asynchronous zspage free and page migration (CVSS 7.8, Linux)
- [CVE-2022-49553](https://cve.now/CVE-2022-49553.md): fs/ntfs3: validate BOOT sectors\_per\_clusters (CVSS 7.8, Linux)
- [CVE-2022-49552](https://cve.now/CVE-2022-49552.md): bpf: Fix combination of jit blinding and pointers to bpf subprogs. (no CVSS, Linux)
- [CVE-2022-49551](https://cve.now/CVE-2022-49551.md): usb: isp1760: Fix out-of-bounds array access (CVSS 7.1, Linux)
- [CVE-2022-49550](https://cve.now/CVE-2022-49550.md): fs/ntfs3: provide block\_invalidate\_folio to fix memory leak (CVSS 5.5, Linux)
- [CVE-2022-49549](https://cve.now/CVE-2022-49549.md): x86/MCE/AMD: Fix memory leak when threshold\_create\_bank() fails (CVSS 5.5, Linux)
- [CVE-2022-49548](https://cve.now/CVE-2022-49548.md): bpf: Fix potential array overflow in bpf\_trampoline\_get\_progs() (CVSS 7.8, Linux)
- [CVE-2022-49547](https://cve.now/CVE-2022-49547.md): btrfs: fix deadlock between concurrent dio writes when low on free data space (CVSS 5.5, Linux)
- [CVE-2022-49546](https://cve.now/CVE-2022-49546.md): x86/kexec: fix memory leak of elf header buffer (no CVSS, Linux)
- [CVE-2022-49545](https://cve.now/CVE-2022-49545.md): ALSA: usb-audio: Cancel pending work at closing a MIDI substream (CVSS 7.8, Linux)
- [CVE-2022-49544](https://cve.now/CVE-2022-49544.md): ipw2x00: Fix potential NULL dereference in libipw\_xmit() (CVSS 5.5, Linux)
- [CVE-2022-49543](https://cve.now/CVE-2022-49543.md): ath11k: fix the warning of dev\_wake in mhi\_pm\_disable\_transition() (no CVSS, Linux)
- [CVE-2022-49542](https://cve.now/CVE-2022-49542.md): scsi: lpfc: Move cfg\_log\_verbose check before calling lpfc\_dmp\_dbg() (CVSS 5.5, Linux)
- [CVE-2022-49541](https://cve.now/CVE-2022-49541.md): cifs: fix potential double free during failed mount (CVSS 7.8, Linux)
- [CVE-2022-49540](https://cve.now/CVE-2022-49540.md): rcu-tasks: Fix race in schedule and flush work (no CVSS, Linux)
- [CVE-2022-49539](https://cve.now/CVE-2022-49539.md): rtw89: ser: fix CAM leaks occurring in L2 reset (no CVSS, Linux)
- [CVE-2022-49538](https://cve.now/CVE-2022-49538.md): ALSA: jack: Access input\_dev under mutex (CVSS 5.5, Linux)
- [CVE-2022-49537](https://cve.now/CVE-2022-49537.md): scsi: lpfc: Fix call trace observed during I/O with CMF enabled (no CVSS, Linux)
- [CVE-2022-49536](https://cve.now/CVE-2022-49536.md): scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (CVSS 5.5, Linux)
- [CVE-2022-49535](https://cve.now/CVE-2022-49535.md): scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (CVSS 8.8, Linux)
- [CVE-2022-49534](https://cve.now/CVE-2022-49534.md): scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI\_RJT (CVSS 5.5, Linux)
- [CVE-2022-49533](https://cve.now/CVE-2022-49533.md): ath11k: Change max no of active probe SSID and BSSID to fw capability (CVSS 7.8, Linux)
- [CVE-2022-49532](https://cve.now/CVE-2022-49532.md): drm/virtio: fix NULL pointer dereference in virtio\_gpu\_conn\_get\_modes (CVSS 5.5, Linux)
- [CVE-2022-49531](https://cve.now/CVE-2022-49531.md): loop: implement -\>free\_disk (CVSS 7.8, Linux)
- [CVE-2022-49530](https://cve.now/CVE-2022-49530.md): drm/amd/pm: fix double free in si\_parse\_power\_table() (CVSS 7.8, Linux)
- [CVE-2022-49529](https://cve.now/CVE-2022-49529.md): drm/amdgpu/pm: fix the null pointer while the smu is disabled (CVSS 5.5, Linux)
- [CVE-2022-49528](https://cve.now/CVE-2022-49528.md): media: i2c: dw9714: Disable the regulator when the driver fails to probe (no CVSS, Linux)
- [CVE-2022-49527](https://cve.now/CVE-2022-49527.md): media: venus: hfi: avoid null dereference in deinit (CVSS 5.5, Linux)
- [CVE-2022-49526](https://cve.now/CVE-2022-49526.md): md/bitmap: don't set sb values if can't pass sanity check (no CVSS, Linux)
- [CVE-2022-49525](https://cve.now/CVE-2022-49525.md): media: cx25821: Fix the warning when removing the module (no CVSS, Linux)
- [CVE-2022-49524](https://cve.now/CVE-2022-49524.md): media: pci: cx23885: Fix the error handling in cx23885\_initdev() (CVSS 7.8, Linux)
- [CVE-2022-49523](https://cve.now/CVE-2022-49523.md): ath11k: disable spectral scan during spectral deinit (CVSS 5.5, Linux)
- [CVE-2022-49522](https://cve.now/CVE-2022-49522.md): mmc: jz4740: Apply DMA engine limits to maximum segment size (no CVSS, Linux)
- [CVE-2022-49521](https://cve.now/CVE-2022-49521.md): scsi: lpfc: Fix resource leak in lpfc\_sli4\_send\_seq\_to\_ulp() (no CVSS, Linux)
- [CVE-2022-49520](https://cve.now/CVE-2022-49520.md): arm64: compat: Do not treat syscall number as ESR\_ELx for a bad syscall (no CVSS, Linux)
- [CVE-2022-49519](https://cve.now/CVE-2022-49519.md): ath10k: skip ath10k\_halt during suspend for driver state RESTARTING (CVSS 8.8, Linux)
- [CVE-2022-49518](https://cve.now/CVE-2022-49518.md): ASoC: SOF: ipc3-topology: Correct get\_control\_data for non bytes payload (no CVSS, Linux)
- [CVE-2022-49517](https://cve.now/CVE-2022-49517.md): ASoC: mediatek: Fix missing of\_node\_put in mt2701\_wm8960\_machine\_probe (CVSS 5.5, Linux)
- [CVE-2022-49516](https://cve.now/CVE-2022-49516.md): ice: always check VF VSI pointer values (CVSS 5.5, Linux)
- [CVE-2022-49515](https://cve.now/CVE-2022-49515.md): ASoC: cs35l41: Fix an out-of-bounds access in otp\_packed\_element\_t (no CVSS, Linux)
- [CVE-2022-49514](https://cve.now/CVE-2022-49514.md): ASoC: mediatek: Fix error handling in mt8173\_max98090\_dev\_probe (CVSS 5.5, Linux)
- [CVE-2022-49513](https://cve.now/CVE-2022-49513.md): cpufreq: governor: Use kobject release() method to free dbs\_data (no CVSS, Linux)
- [CVE-2022-49512](https://cve.now/CVE-2022-49512.md): mtd: rawnand: denali: Use managed device resources (no CVSS, Linux)
- [CVE-2022-49511](https://cve.now/CVE-2022-49511.md): fbdev: defio: fix the pagelist corruption (CVSS 7.8, Linux)
- [CVE-2022-49510](https://cve.now/CVE-2022-49510.md): drm/omap: fix NULL but dereferenced coccicheck error (CVSS 5.5, Linux)
- [CVE-2022-49509](https://cve.now/CVE-2022-49509.md): media: i2c: max9286: fix kernel oops when removing module (no CVSS, Linux)
- [CVE-2022-49508](https://cve.now/CVE-2022-49508.md): HID: elan: Fix potential double free in elan\_input\_configured (CVSS 7.8, Linux)
- [CVE-2022-49507](https://cve.now/CVE-2022-49507.md): regulator: da9121: Fix uninit-value in da9121\_assign\_chip\_model() (CVSS 5.5, Linux)
- [CVE-2022-49506](https://cve.now/CVE-2022-49506.md): drm/mediatek: Add vblank register/unregister callback functions (no CVSS, Linux)
- [CVE-2022-49505](https://cve.now/CVE-2022-49505.md): NFC: NULL out the dev-\>rfkill to prevent UAF (CVSS 7.8, Linux)
- [CVE-2022-49504](https://cve.now/CVE-2022-49504.md): scsi: lpfc: Inhibit aborts if external loopback plug is inserted (no CVSS, Linux)
- [CVE-2022-49503](https://cve.now/CVE-2022-49503.md): ath9k\_htc: fix potential out of bounds access with invalid rxstatus-\>rs\_keyix (no CVSS, Linux)
- [CVE-2022-49502](https://cve.now/CVE-2022-49502.md): media: rga: fix possible memory leak in rga\_probe (CVSS 5.5, Linux)
- [CVE-2022-49501](https://cve.now/CVE-2022-49501.md): usbnet: Run unregister\_netdev() before unbind() again (CVSS 7.8, Linux)
- [CVE-2022-49500](https://cve.now/CVE-2022-49500.md): wl1251: dynamically allocate memory used for DMA (CVSS 8.8, Linux)
- [CVE-2022-49499](https://cve.now/CVE-2022-49499.md): drm/msm: Fix null pointer dereferences without iommu (CVSS 5.5, Linux)
- [CVE-2022-49498](https://cve.now/CVE-2022-49498.md): ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (CVSS 5.5, Linux)
- [CVE-2022-49497](https://cve.now/CVE-2022-49497.md): net: remove two BUG() from skb\_checksum\_help() (CVSS 5.5, Linux)
- [CVE-2022-49496](https://cve.now/CVE-2022-49496.md): media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko (CVSS 5.5, Linux)
- [CVE-2022-49495](https://cve.now/CVE-2022-49495.md): drm/msm/hdmi: check return value after calling platform\_get\_resource\_byname() (CVSS 5.5, Linux)
- [CVE-2022-49494](https://cve.now/CVE-2022-49494.md): mtd: rawnand: cadence: fix possible null-ptr-deref in cadence\_nand\_dt\_probe() (CVSS 5.5, Linux)
- [CVE-2022-49493](https://cve.now/CVE-2022-49493.md): ASoC: rt5645: Fix errorenous cleanup order (CVSS 7.8, Linux)
- [CVE-2022-49492](https://cve.now/CVE-2022-49492.md): nvme-pci: fix a NULL pointer dereference in nvme\_alloc\_admin\_tags (CVSS 5.5, Linux)
- [CVE-2022-49491](https://cve.now/CVE-2022-49491.md): drm/rockchip: vop: fix possible null-ptr-deref in vop\_bind() (CVSS 5.5, Linux)
- [CVE-2022-49490](https://cve.now/CVE-2022-49490.md): drm/msm/mdp5: Return error code in mdp5\_pipe\_release when deadlock is detected (no CVSS, Linux)
- [CVE-2022-49489](https://cve.now/CVE-2022-49489.md): drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (CVSS 7.8, Linux)
- [CVE-2022-49488](https://cve.now/CVE-2022-49488.md): drm/msm/mdp5: Return error code in mdp5\_mixer\_release when deadlock is detected (no CVSS, Linux)
- [CVE-2022-49487](https://cve.now/CVE-2022-49487.md): mtd: rawnand: intel: fix possible null-ptr-deref in ebu\_nand\_probe() (CVSS 5.5, Linux)
- [CVE-2022-49486](https://cve.now/CVE-2022-49486.md): ASoC: fsl: Fix refcount leak in imx\_sgtl5000\_probe (CVSS 5.5, Linux)
- [CVE-2022-49485](https://cve.now/CVE-2022-49485.md): drm/v3d: Fix null pointer dereference of pointer perfmon (CVSS 5.5, Linux)
- [CVE-2022-49484](https://cve.now/CVE-2022-49484.md): mt76: mt7915: fix possible NULL pointer dereference in mt7915\_mac\_fill\_rx\_vector (CVSS 5.5, Linux)
- [CVE-2022-49483](https://cve.now/CVE-2022-49483.md): drm/msm/disp/dpu1: avoid clearing hw interrupts if hw\_intr is null during drm uninit (CVSS 5.5, Linux)
- [CVE-2022-49482](https://cve.now/CVE-2022-49482.md): ASoC: mxs-saif: Fix refcount leak in mxs\_saif\_probe (CVSS 5.5, Linux)
- [CVE-2022-49481](https://cve.now/CVE-2022-49481.md): regulator: pfuze100: Fix refcount leak in pfuze\_parse\_regulators\_dt (CVSS 5.5, Linux)
- [CVE-2022-49480](https://cve.now/CVE-2022-49480.md): ASoC: imx-hdmi: Fix refcount leak in imx\_hdmi\_probe (CVSS 5.5, Linux)
- [CVE-2022-49479](https://cve.now/CVE-2022-49479.md): mt76: fix tx status related use-after-free race on station removal (CVSS 8.8, Linux)
- [CVE-2022-49478](https://cve.now/CVE-2022-49478.md): media: pvrusb2: fix array-index-out-of-bounds in pvr2\_i2c\_core\_init (CVSS 7.8, Linux)
- [CVE-2022-49477](https://cve.now/CVE-2022-49477.md): ASoC: samsung: Fix refcount leak in aries\_audio\_probe (CVSS 5.5, Linux)
- [CVE-2022-49476](https://cve.now/CVE-2022-49476.md): mt76: mt7921: fix kernel crash at mt7921\_pci\_remove (CVSS 5.5, Linux)
- [CVE-2022-49475](https://cve.now/CVE-2022-49475.md): spi: spi-fsl-qspi: check return value after calling platform\_get\_resource\_byname() (CVSS 5.5, Linux)
- [CVE-2022-49474](https://cve.now/CVE-2022-49474.md): Bluetooth: fix dangling sco\_conn and use-after-free in sco\_sock\_timeout (CVSS 7.8, Linux)
- [CVE-2022-49473](https://cve.now/CVE-2022-49473.md): ASoC: ti: j721e-evm: Fix refcount leak in j721e\_soc\_probe\_\* (CVSS 5.5, Linux)
- [CVE-2022-49472](https://cve.now/CVE-2022-49472.md): net: phy: micrel: Allow probing without .driver\_data (CVSS 5.5, Linux)
- [CVE-2022-49471](https://cve.now/CVE-2022-49471.md): rtw89: cfo: check mac\_id to avoid out-of-bounds (CVSS 8.8, Linux)
- [CVE-2022-49470](https://cve.now/CVE-2022-49470.md): Bluetooth: btmtksdio: fix use-after-free at btmtksdio\_recv\_event (CVSS 8.8, Linux)
- [CVE-2022-49469](https://cve.now/CVE-2022-49469.md): btrfs: fix anon\_dev leak in create\_subvol() (no CVSS, Linux)
- [CVE-2022-49468](https://cve.now/CVE-2022-49468.md): thermal/core: Fix memory leak in \_\_thermal\_cooling\_device\_register() (CVSS 5.5, Linux)
- [CVE-2022-49467](https://cve.now/CVE-2022-49467.md): drm: msm: fix possible memory leak in mdp5\_crtc\_cursor\_set() (CVSS 5.5, Linux)
- [CVE-2022-49466](https://cve.now/CVE-2022-49466.md): regulator: scmi: Fix refcount leak in scmi\_regulator\_probe (CVSS 5.5, Linux)
- [CVE-2022-49465](https://cve.now/CVE-2022-49465.md): blk-throttle: Set BIO\_THROTTLED when bio has been throttled (CVSS 7.8, Linux)
- [CVE-2022-49464](https://cve.now/CVE-2022-49464.md): erofs: fix buffer copy overflow of ztailpacking feature (CVSS 7.8, Linux)
- [CVE-2022-49463](https://cve.now/CVE-2022-49463.md): thermal/drivers/imx\_sc\_thermal: Fix refcount leak in imx\_sc\_thermal\_probe (CVSS 5.5, Linux)
- [CVE-2022-49462](https://cve.now/CVE-2022-49462.md): drm/msm/a6xx: Fix refcount leak in a6xx\_gpu\_init (CVSS 5.5, Linux)
- [CVE-2022-49461](https://cve.now/CVE-2022-49461.md): amt: fix memory leak for advertisement message (CVSS 5.5, Linux)
- [CVE-2022-49460](https://cve.now/CVE-2022-49460.md): PM / devfreq: rk3399\_dmc: Disable edev on remove() (no CVSS, Linux)
- [CVE-2022-49459](https://cve.now/CVE-2022-49459.md): thermal/drivers/broadcom: Fix potential NULL dereference in sr\_thermal\_probe (CVSS 5.5, Linux)
- [CVE-2022-49458](https://cve.now/CVE-2022-49458.md): drm/msm: don't free the IRQ if it was not requested (no CVSS, Linux)
- [CVE-2022-49457](https://cve.now/CVE-2022-49457.md): ARM: versatile: Add missing of\_node\_put in dcscb\_init (CVSS 5.5, Linux)
- [CVE-2022-49456](https://cve.now/CVE-2022-49456.md): bonding: fix missed rcu protection (CVSS 7.8, Linux)
- [CVE-2022-49455](https://cve.now/CVE-2022-49455.md): misc: ocxl: fix possible double free in ocxl\_file\_register\_afu (CVSS 7.8, Linux)
- [CVE-2022-49454](https://cve.now/CVE-2022-49454.md): PCI: mediatek: Fix refcount leak in mtk\_pcie\_subsys\_powerup() (CVSS 5.5, Linux)
- [CVE-2022-49453](https://cve.now/CVE-2022-49453.md): soc: ti: ti\_sci\_pm\_domains: Check for null return of devm\_kcalloc (CVSS 5.5, Linux)
- [CVE-2022-49452](https://cve.now/CVE-2022-49452.md): dpaa2-eth: retrieve the virtual address before dma\_unmap (CVSS 7.5, Linux)
- [CVE-2022-49451](https://cve.now/CVE-2022-49451.md): firmware: arm\_scmi: Fix list protocols enumeration in the base protocol (CVSS 8.4, Linux)
- [CVE-2022-49450](https://cve.now/CVE-2022-49450.md): rxrpc: Fix listen() setting the bar too high for the prealloc rings (CVSS 5.5, Linux)
- [CVE-2022-49449](https://cve.now/CVE-2022-49449.md): pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh\_pfc\_map\_resources() (CVSS 5.5, Linux)
- [CVE-2022-49448](https://cve.now/CVE-2022-49448.md): soc: bcm: Check for NULL return of devm\_kzalloc() (CVSS 5.5, Linux)
- [CVE-2022-49447](https://cve.now/CVE-2022-49447.md): ARM: hisi: Add missing of\_node\_put after of\_find\_compatible\_node (CVSS 5.5, Linux)
- [CVE-2022-49446](https://cve.now/CVE-2022-49446.md): nvdimm: Fix firmware activation deadlock scenarios (CVSS 5.5, Linux)
- [CVE-2022-49445](https://cve.now/CVE-2022-49445.md): pinctrl: renesas: core: Fix possible null-ptr-deref in sh\_pfc\_map\_resources() (CVSS 5.5, Linux)
- [CVE-2022-49444](https://cve.now/CVE-2022-49444.md): module: fix \[e\_shstrndx\].sh\_size=0 OOB access (no CVSS, Linux)
- [CVE-2022-49443](https://cve.now/CVE-2022-49443.md): list: fix a data-race around ep-\>rdllist (CVSS 4.7, Linux)
- [CVE-2022-49442](https://cve.now/CVE-2022-49442.md): drivers/base/node.c: fix compaction sysfs file leak (no CVSS, Linux)
- [CVE-2022-49441](https://cve.now/CVE-2022-49441.md): tty: fix deadlock caused by calling printk() under tty\_port-\>lock (CVSS 5.5, Linux)
- [CVE-2022-49440](https://cve.now/CVE-2022-49440.md): powerpc/rtas: Keep MSR\[RI\] set when calling RTAS (no CVSS, Linux)
- [CVE-2022-49439](https://cve.now/CVE-2022-49439.md): powerpc/fsl\_rio: Fix refcount leak in fsl\_rio\_setup (CVSS 5.5, Linux)
- [CVE-2022-49438](https://cve.now/CVE-2022-49438.md): Input: sparcspkr - fix refcount leak in bbc\_beep\_probe (CVSS 5.5, Linux)
- [CVE-2022-49437](https://cve.now/CVE-2022-49437.md): powerpc/xive: Fix refcount leak in xive\_spapr\_init (CVSS 5.5, Linux)
- [CVE-2022-49436](https://cve.now/CVE-2022-49436.md): powerpc/papr\_scm: Fix leaking nvdimm\_events\_map elements (no CVSS, Linux)
- [CVE-2022-49435](https://cve.now/CVE-2022-49435.md): mfd: davinci\_voicecodec: Fix possible null-ptr-deref davinci\_vc\_probe() (no CVSS, Linux)
- [CVE-2022-49434](https://cve.now/CVE-2022-49434.md): PCI: Avoid pci\_dev\_lock() AB/BA deadlock with sriov\_numvfs\_store() (no CVSS, Linux)
- [CVE-2022-49433](https://cve.now/CVE-2022-49433.md): RDMA/hfi1: Prevent use of lock before it is initialized (no CVSS, Linux)
- [CVE-2022-49432](https://cve.now/CVE-2022-49432.md): powerpc/xics: fix refcount leak in icp\_opal\_init() (no CVSS, Linux)
- [CVE-2022-49431](https://cve.now/CVE-2022-49431.md): powerpc/iommu: Add missing of\_node\_put in iommu\_init\_early\_dart (no CVSS, Linux)
- [CVE-2022-49430](https://cve.now/CVE-2022-49430.md): Input: gpio-keys - cancel delayed work only in case of GPIO (no CVSS, Linux)
- [CVE-2022-49429](https://cve.now/CVE-2022-49429.md): RDMA/hfi1: Prevent panic when SDMA is disabled (no CVSS, Linux)
- [CVE-2022-49428](https://cve.now/CVE-2022-49428.md): f2fs: fix to do sanity check on inline\_dots inode (no CVSS, Linux)
- [CVE-2022-49427](https://cve.now/CVE-2022-49427.md): iommu/mediatek: Remove clk\_disable in mtk\_iommu\_remove (no CVSS, Linux)
- [CVE-2022-49426](https://cve.now/CVE-2022-49426.md): iommu/arm-smmu-v3-sva: Fix mm use-after-free (CVSS 7.8, Linux)
- [CVE-2022-49425](https://cve.now/CVE-2022-49425.md): f2fs: fix dereference of stale list iterator after loop body (CVSS 7.8, Linux)
- [CVE-2022-49424](https://cve.now/CVE-2022-49424.md): iommu/mediatek: Fix NULL pointer dereference when printing dev\_name (no CVSS, Linux)
- [CVE-2022-49423](https://cve.now/CVE-2022-49423.md): rtla: Avoid record NULL pointer dereference (no CVSS, Linux)
- [CVE-2022-49422](https://cve.now/CVE-2022-49422.md): dmaengine: idxd: Fix the error handling path in idxd\_cdev\_register() (no CVSS, Linux)
- [CVE-2022-49421](https://cve.now/CVE-2022-49421.md): video: fbdev: clcdfb: Fix refcount leak in clcdfb\_of\_vram\_setup (no CVSS, Linux)
- [CVE-2022-49420](https://cve.now/CVE-2022-49420.md): net: annotate races around sk-\>sk\_bound\_dev\_if (no CVSS, Linux)
- [CVE-2022-49419](https://cve.now/CVE-2022-49419.md): video: fbdev: vesafb: Fix a use-after-free due early fb\_info cleanup (CVSS 7.8, Linux)
- [CVE-2022-49418](https://cve.now/CVE-2022-49418.md): NFSv4: Fix free of uninitialized nfs4\_label on referral lookup. (CVSS 9.8, Linux)
- [CVE-2022-49417](https://cve.now/CVE-2022-49417.md): iwlwifi: mei: fix potential NULL-ptr deref (no CVSS, Linux)
- [CVE-2022-49416](https://cve.now/CVE-2022-49416.md): wifi: mac80211: fix use-after-free in chanctx code (CVSS 8.8, Linux)
- [CVE-2022-49415](https://cve.now/CVE-2022-49415.md): ipmi:ipmb: Fix refcount leak in ipmi\_ipmb\_probe (no CVSS, Linux)
- [CVE-2022-49414](https://cve.now/CVE-2022-49414.md): ext4: fix race condition between ext4\_write and ext4\_convert\_inline\_data (CVSS 4.7, Linux)
- [CVE-2022-49413](https://cve.now/CVE-2022-49413.md): bfq: Update cgroup information before merging bio (CVSS 7.8, Linux)
- [CVE-2022-49412](https://cve.now/CVE-2022-49412.md): bfq: Avoid merging queues with different parents (CVSS 7.8, Linux)
- [CVE-2022-49411](https://cve.now/CVE-2022-49411.md): bfq: Make sure bfqg for which we are queueing requests is online (CVSS 7.8, Linux)
- [CVE-2022-49410](https://cve.now/CVE-2022-49410.md): tracing: Fix potential double free in create\_var\_ref() (CVSS 7.8, Linux)
- [CVE-2022-49409](https://cve.now/CVE-2022-49409.md): ext4: fix bug\_on in \_\_es\_tree\_search (no CVSS, Linux)
- [CVE-2022-49408](https://cve.now/CVE-2022-49408.md): ext4: fix memory leak in parse\_apply\_sb\_mount\_options() (CVSS 5.5, Linux)
- [CVE-2022-49407](https://cve.now/CVE-2022-49407.md): dlm: fix plock invalid read (CVSS 9.8, Linux)
- [CVE-2022-49406](https://cve.now/CVE-2022-49406.md): block: Fix potential deadlock in blk\_ia\_range\_sysfs\_show() (CVSS 5.5, Linux)
- [CVE-2022-49405](https://cve.now/CVE-2022-49405.md): staging: r8188eu: prevent -\>Ssid overflow in rtw\_wx\_set\_scan() (CVSS 7.8, Linux)
- [CVE-2022-49404](https://cve.now/CVE-2022-49404.md): RDMA/hfi1: Fix potential integer multiplication overflow errors (CVSS 5.5, Linux)
- [CVE-2022-49403](https://cve.now/CVE-2022-49403.md): lib/string\_helpers: fix not adding strarray to device's resource list (CVSS 5.5, Linux)
- [CVE-2022-49402](https://cve.now/CVE-2022-49402.md): ftrace: Clean up hash direct\_functions on register failures (no CVSS, Linux)
- [CVE-2022-49401](https://cve.now/CVE-2022-49401.md): mm/page\_owner: use strscpy() instead of strlcpy() (no CVSS, Linux)
- [CVE-2022-49400](https://cve.now/CVE-2022-49400.md): md: Don't set mddev private to NULL in raid0 pers-\>free (CVSS 5.5, Linux)
- [CVE-2022-49399](https://cve.now/CVE-2022-49399.md): tty: goldfish: Use tty\_port\_destroy() to destroy port (no CVSS, Linux)
- [CVE-2022-49398](https://cve.now/CVE-2022-49398.md): usb: dwc3: gadget: Replace list\_for\_each\_entry\_safe() if using giveback (no CVSS, Linux)
- [CVE-2022-49397](https://cve.now/CVE-2022-49397.md): phy: qcom-qmp: fix struct clk leak on probe errors (no CVSS, Linux)
- [CVE-2022-49396](https://cve.now/CVE-2022-49396.md): phy: qcom-qmp: fix reset-controller leak on probe errors (no CVSS, Linux)
- [CVE-2022-49395](https://cve.now/CVE-2022-49395.md): um: Fix out-of-bounds read in LDT setup (CVSS 7.1, Linux)
- [CVE-2022-49394](https://cve.now/CVE-2022-49394.md): blk-iolatency: Fix inflight count imbalances and IO hangs on offline (no CVSS, Linux)
- [CVE-2022-49393](https://cve.now/CVE-2022-49393.md): misc: fastrpc: fix list iterator in fastrpc\_req\_mem\_unmap\_impl (CVSS 7.8, Linux)
- [CVE-2022-49392](https://cve.now/CVE-2022-49392.md): serial: 8250\_aspeed\_vuart: Fix potential NULL dereference in aspeed\_vuart\_probe (CVSS 5.5, Linux)
- [CVE-2022-49391](https://cve.now/CVE-2022-49391.md): remoteproc: mtk\_scp: Fix a potential double free (CVSS 7.8, Linux)
- [CVE-2022-49390](https://cve.now/CVE-2022-49390.md): macsec: fix UAF bug for real\_dev (CVSS 7.8, Linux)
- [CVE-2022-49389](https://cve.now/CVE-2022-49389.md): usb: usbip: fix a refcount leak in stub\_probe() (CVSS 5.5, Linux)
- [CVE-2022-49388](https://cve.now/CVE-2022-49388.md): ubi: ubi\_create\_volume: Fix use-after-free when volume creation failed (CVSS 7.8, Linux)
- [CVE-2022-49387](https://cve.now/CVE-2022-49387.md): watchdog: rzg2l\_wdt: Fix 32bit overflow issue (CVSS 5.5, Linux)
- [CVE-2022-49386](https://cve.now/CVE-2022-49386.md): net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks (CVSS 5.5, Linux)
- [CVE-2022-49385](https://cve.now/CVE-2022-49385.md): driver: base: fix UAF when driver\_attach failed (CVSS 7.8, Linux)
- [CVE-2022-49384](https://cve.now/CVE-2022-49384.md): md: fix double free of io\_acct\_set bioset (CVSS 7.8, Linux)
- [CVE-2022-49383](https://cve.now/CVE-2022-49383.md): watchdog: rzg2l\_wdt: Fix 'BUG: Invalid wait context' (no CVSS, Linux)
- [CVE-2022-49382](https://cve.now/CVE-2022-49382.md): soc: rockchip: Fix refcount leak in rockchip\_grf\_init (CVSS 5.5, Linux)
- [CVE-2022-49381](https://cve.now/CVE-2022-49381.md): jffs2: fix memory leak in jffs2\_do\_fill\_super (CVSS 5.5, Linux)
- [CVE-2022-49380](https://cve.now/CVE-2022-49380.md): f2fs: fix to avoid f2fs\_bug\_on() in dec\_valid\_node\_count() (no CVSS, Linux)
- [CVE-2022-49379](https://cve.now/CVE-2022-49379.md): driver core: Fix wait\_for\_device\_probe() & deferred\_probe\_timeout interaction (no CVSS, Linux)
- [CVE-2022-49378](https://cve.now/CVE-2022-49378.md): sfc: fix considering that all channels have TX queues (no CVSS, Linux)
- [CVE-2022-49377](https://cve.now/CVE-2022-49377.md): blk-mq: don't touch -\>tagset in blk\_mq\_get\_sq\_hctx (CVSS 7.8, Linux)
- [CVE-2022-49376](https://cve.now/CVE-2022-49376.md): scsi: sd: Fix potential NULL pointer dereference (CVSS 5.5, Linux)
- [CVE-2022-49375](https://cve.now/CVE-2022-49375.md): rtc: mt6397: check return value after calling platform\_get\_resource() (CVSS 5.5, Linux)
- [CVE-2022-49374](https://cve.now/CVE-2022-49374.md): tipc: check attribute length for bearer name (CVSS 5.5, Linux)
- [CVE-2022-49373](https://cve.now/CVE-2022-49373.md): watchdog: ts4800\_wdt: Fix refcount leak in ts4800\_wdt\_probe (CVSS 5.5, Linux)
- [CVE-2022-49372](https://cve.now/CVE-2022-49372.md): tcp: tcp\_rtx\_synack() can be called from process context (no CVSS, Linux)
- [CVE-2022-49371](https://cve.now/CVE-2022-49371.md): driver core: fix deadlock in \_\_device\_attach (CVSS 5.5, Linux)
- [CVE-2022-49370](https://cve.now/CVE-2022-49370.md): firmware: dmi-sysfs: Fix memory leak in dmi\_sysfs\_register\_handle (CVSS 5.5, Linux)
- [CVE-2022-49369](https://cve.now/CVE-2022-49369.md): amt: fix possible memory leak in amt\_rcv() (CVSS 5.5, Linux)
- [CVE-2022-49368](https://cve.now/CVE-2022-49368.md): net: ethernet: mtk\_eth\_soc: out of bounds read in mtk\_hwlro\_get\_fdir\_entry() (CVSS 7.1, Linux)
- [CVE-2022-49367](https://cve.now/CVE-2022-49367.md): net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx\_mdios\_register (CVSS 5.5, Linux)
- [CVE-2022-49366](https://cve.now/CVE-2022-49366.md): ksmbd: fix reference count leak in smb\_check\_perm\_dacl() (CVSS 5.5, Linux)
- [CVE-2022-49365](https://cve.now/CVE-2022-49365.md): drm/amdgpu: Off by one in dm\_dmub\_outbox1\_low\_irq() (CVSS 5.5, Linux)
- [CVE-2022-49364](https://cve.now/CVE-2022-49364.md): f2fs: fix to clear dirty inode in f2fs\_evict\_inode() (no CVSS, Linux)
- [CVE-2022-49363](https://cve.now/CVE-2022-49363.md): f2fs: fix to do sanity check on block address in f2fs\_do\_zero\_range() (CVSS 7.8, Linux)
- [CVE-2022-49362](https://cve.now/CVE-2022-49362.md): NFSD: Fix potential use-after-free in nfsd\_file\_put() (CVSS 9.8, Linux)
- [CVE-2022-49361](https://cve.now/CVE-2022-49361.md): f2fs: fix to do sanity check for inline inode (no CVSS, Linux)
- [CVE-2022-49360](https://cve.now/CVE-2022-49360.md): f2fs: fix to do sanity check on total\_data\_blocks (no CVSS, Linux)
- [CVE-2022-49359](https://cve.now/CVE-2022-49359.md): drm/panfrost: Job should reference MMU not file\_priv (CVSS 7.8, Linux)
- [CVE-2022-49358](https://cve.now/CVE-2022-49358.md): netfilter: nf\_tables: memleak flow rule from commit path (CVSS 5.5, Linux)
- [CVE-2022-49357](https://cve.now/CVE-2022-49357.md): efi: Do not import certificates from UEFI Secure Boot for T2 Macs (no CVSS, Linux)
- [CVE-2022-49356](https://cve.now/CVE-2022-49356.md): SUNRPC: Trap RDMA segment overflows (CVSS 9.8, Linux)
- [CVE-2022-49354](https://cve.now/CVE-2022-49354.md): ata: pata\_octeon\_cf: Fix refcount leak in octeon\_cf\_probe (CVSS 5.5, Linux)
- [CVE-2022-49353](https://cve.now/CVE-2022-49353.md): powerpc/papr\_scm: don't requests stats with '0' sized stats buffer (CVSS 5.5, Linux)
- [CVE-2022-49352](https://cve.now/CVE-2022-49352.md): ext4: fix warning in ext4\_handle\_inode\_extension (no CVSS, Linux)
- [CVE-2022-49351](https://cve.now/CVE-2022-49351.md): net: altera: Fix refcount leak in altera\_tse\_mdio\_create (CVSS 5.5, Linux)
- [CVE-2022-49350](https://cve.now/CVE-2022-49350.md): net: mdio: unexport \_\_init-annotated mdio\_bus\_init() (no CVSS, Linux)
- [CVE-2022-49349](https://cve.now/CVE-2022-49349.md): ext4: fix use-after-free in ext4\_rename\_dir\_prepare (CVSS 7.8, Linux)
- [CVE-2022-49348](https://cve.now/CVE-2022-49348.md): ext4: filter out EXT4\_FC\_REPLAY from on-disk superblock field s\_state (no CVSS, Linux)
- [CVE-2022-49347](https://cve.now/CVE-2022-49347.md): ext4: fix bug\_on in ext4\_writepages (no CVSS, Linux)
- [CVE-2022-49346](https://cve.now/CVE-2022-49346.md): net: dsa: lantiq\_gswip: Fix refcount leak in gswip\_gphy\_fw\_list (CVSS 5.5, Linux)
- [CVE-2022-49345](https://cve.now/CVE-2022-49345.md): net: xfrm: unexport \_\_init-annotated xfrm4\_protocol\_init() (no CVSS, Linux)
- [CVE-2022-49344](https://cve.now/CVE-2022-49344.md): af\_unix: Fix a data-race in unix\_dgram\_peer\_wake\_me(). (CVSS 4.7, Linux)
- [CVE-2022-49343](https://cve.now/CVE-2022-49343.md): ext4: avoid cycles in directory h-tree (CVSS 7.8, Linux)
- [CVE-2022-49342](https://cve.now/CVE-2022-49342.md): net: ethernet: bgmac: Fix refcount leak in bcma\_mdio\_mii\_register (CVSS 5.5, Linux)
- [CVE-2022-49341](https://cve.now/CVE-2022-49341.md): bpf, arm64: Clear prog-\>jited\_len along prog-\>jited (no CVSS, Linux)
- [CVE-2022-49340](https://cve.now/CVE-2022-49340.md): ip\_gre: test csum\_start instead of transport header (CVSS 7.1, Linux)
- [CVE-2022-49339](https://cve.now/CVE-2022-49339.md): net: ipv6: unexport \_\_init-annotated seg6\_hmac\_init() (no CVSS, Linux)
- [CVE-2022-49338](https://cve.now/CVE-2022-49338.md): net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules (no CVSS, Linux)
- [CVE-2022-49337](https://cve.now/CVE-2022-49337.md): ocfs2: dlmfs: fix error handling of user\_dlm\_destroy\_lock (CVSS 7.8, Linux)
- [CVE-2022-49336](https://cve.now/CVE-2022-49336.md): drm/etnaviv: check for reaped mapping in etnaviv\_iommu\_unmap\_gem (CVSS 7.8, Linux)
- [CVE-2022-49335](https://cve.now/CVE-2022-49335.md): drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. (CVSS 5.5, Linux)
- [CVE-2022-49334](https://cve.now/CVE-2022-49334.md): mm/huge\_memory: Fix xarray node memory leak (CVSS 5.5, Linux)
- [CVE-2022-49333](https://cve.now/CVE-2022-49333.md): net/mlx5: E-Switch, pair only capable devices (no CVSS, Linux)
- [CVE-2022-49332](https://cve.now/CVE-2022-49332.md): scsi: lpfc: Address NULL pointer dereference after starget\_to\_rport() (CVSS 5.5, Linux)
- [CVE-2022-49331](https://cve.now/CVE-2022-49331.md): nfc: st21nfca: fix memory leaks in EVT\_TRANSACTION handling (CVSS 5.5, Linux)
- [CVE-2022-49330](https://cve.now/CVE-2022-49330.md): tcp: fix tcp\_mtup\_probe\_success vs wrong snd\_cwnd (CVSS 7.5, Linux)
- [CVE-2022-49329](https://cve.now/CVE-2022-49329.md): vduse: Fix NULL pointer dereference on sysfs access (CVSS 5.5, Linux)
- [CVE-2022-49328](https://cve.now/CVE-2022-49328.md): mt76: fix use-after-free by removing a non-RCU wcid pointer (CVSS 8.8, Linux)
- [CVE-2022-49327](https://cve.now/CVE-2022-49327.md): bcache: avoid journal no-space deadlock by reserving 1 journal bucket (CVSS 5.5, Linux)
- [CVE-2022-49326](https://cve.now/CVE-2022-49326.md): rtl818x: Prevent using not initialized queues (CVSS 5.5, Linux)
- [CVE-2022-49325](https://cve.now/CVE-2022-49325.md): tcp: add accessors to read/set tp-\>snd\_cwnd (CVSS 7.5, Linux)
- [CVE-2022-49324](https://cve.now/CVE-2022-49324.md): mips: cpc: Fix refcount leak in mips\_cpc\_default\_phys\_base (CVSS 5.5, Linux)
- [CVE-2022-49323](https://cve.now/CVE-2022-49323.md): iommu/arm-smmu: fix possible null-ptr-deref in arm\_smmu\_device\_probe() (CVSS 5.5, Linux)
- [CVE-2022-49322](https://cve.now/CVE-2022-49322.md): tracing: Fix sleeping function called from invalid context on RT kernel (CVSS 5.5, Linux)
- [CVE-2022-49321](https://cve.now/CVE-2022-49321.md): xprtrdma: treat all calls not a bcall when bc\_serv is NULL (CVSS 7.5, Linux)
- [CVE-2022-49320](https://cve.now/CVE-2022-49320.md): dmaengine: zynqmp\_dma: In struct zynqmp\_dma\_chan fix desc\_size data type (no CVSS, Linux)
- [CVE-2022-49319](https://cve.now/CVE-2022-49319.md): iommu/arm-smmu-v3: check return value after calling platform\_get\_resource() (CVSS 5.5, Linux)
- [CVE-2022-49318](https://cve.now/CVE-2022-49318.md): f2fs: remove WARN\_ON in f2fs\_is\_valid\_blkaddr (CVSS 5.5, Linux)
- [CVE-2022-49317](https://cve.now/CVE-2022-49317.md): f2fs: avoid infinite loop to flush node pages (CVSS 5.5, Linux)
- [CVE-2022-49316](https://cve.now/CVE-2022-49316.md): NFSv4: Don't hold the layoutget locks across multiple RPC calls (CVSS 5.5, Linux)
- [CVE-2022-49315](https://cve.now/CVE-2022-49315.md): drivers: staging: rtl8192e: Fix deadlock in rtllib\_beacons\_stop() (CVSS 5.5, Linux)
- [CVE-2022-49314](https://cve.now/CVE-2022-49314.md): tty: Fix a possible resource leak in icom\_probe (CVSS 5.5, Linux)
- [CVE-2022-49313](https://cve.now/CVE-2022-49313.md): drivers: usb: host: Fix deadlock in oxu\_bus\_suspend() (CVSS 5.5, Linux)
- [CVE-2022-49312](https://cve.now/CVE-2022-49312.md): staging: rtl8712: fix a potential memory leak in r871xu\_drv\_init() (CVSS 5.5, Linux)
- [CVE-2022-49311](https://cve.now/CVE-2022-49311.md): drivers: staging: rtl8192bs: Fix deadlock in rtw\_joinbss\_event\_prehandle() (CVSS 5.5, Linux)
- [CVE-2022-49310](https://cve.now/CVE-2022-49310.md): char: xillybus: fix a refcount leak in cleanup\_dev() (CVSS 5.5, Linux)
- [CVE-2022-49309](https://cve.now/CVE-2022-49309.md): drivers: staging: rtl8723bs: Fix deadlock in rtw\_surveydone\_event\_callback() (no CVSS, Linux)
- [CVE-2022-49308](https://cve.now/CVE-2022-49308.md): extcon: Modify extcon device to be created after driver data is set (no CVSS, Linux)
- [CVE-2022-49307](https://cve.now/CVE-2022-49307.md): tty: synclink\_gt: Fix null-pointer-dereference in slgt\_clean() (CVSS 5.5, Linux)
- [CVE-2022-49306](https://cve.now/CVE-2022-49306.md): usb: dwc3: host: Stop setting the ACPI companion (no CVSS, Linux)
- [CVE-2022-49305](https://cve.now/CVE-2022-49305.md): drivers: staging: rtl8192u: Fix deadlock in ieee80211\_beacons\_stop() (CVSS 5.5, Linux)
- [CVE-2022-49304](https://cve.now/CVE-2022-49304.md): drivers: tty: serial: Fix deadlock in sa1100\_set\_termios() (CVSS 5.5, Linux)
- [CVE-2022-49303](https://cve.now/CVE-2022-49303.md): drivers: staging: rtl8192eu: Fix deadlock in rtw\_joinbss\_event\_prehandle (CVSS 5.5, Linux)
- [CVE-2022-49302](https://cve.now/CVE-2022-49302.md): USB: host: isp116x: check return value after calling platform\_get\_resource() (CVSS 5.5, Linux)
- [CVE-2022-49301](https://cve.now/CVE-2022-49301.md): staging: rtl8712: fix uninit-value in usb\_read8() and friends (CVSS 5.5, Linux)
- [CVE-2022-49300](https://cve.now/CVE-2022-49300.md): nbd: fix race between nbd\_alloc\_config() and module removal (CVSS 4.7, Linux)
- [CVE-2021-47660](https://cve.now/CVE-2021-47660.md): fs/ntfs3: Fix some memory leaks in an error handling path of 'log\_replay()' (CVSS 5.5, Linux)
- [CVE-2021-47659](https://cve.now/CVE-2021-47659.md): drm/plane: Move range check for format\_count earlier (no CVSS, Linux)
- [CVE-2022-49298](https://cve.now/CVE-2022-49298.md): staging: rtl8712: fix uninit-value in r871xu\_drv\_init() (CVSS 5.5, Linux)
- [CVE-2022-49297](https://cve.now/CVE-2022-49297.md): nbd: fix io hung while disconnecting device (no CVSS, Linux)
- [CVE-2022-49296](https://cve.now/CVE-2022-49296.md): ceph: fix possible deadlock when holding Fwb to get inline\_data (CVSS 5.5, Linux)
- [CVE-2022-49295](https://cve.now/CVE-2022-49295.md): nbd: call genl\_unregister\_family() first in nbd\_cleanup() (CVSS 7.0, Linux)
- [CVE-2022-49294](https://cve.now/CVE-2022-49294.md): drm/amd/display: Check if modulo is 0 before dividing. (CVSS 5.5, Linux)
- [CVE-2021-47658](https://cve.now/CVE-2021-47658.md): drm/amd/pm: fix a potential gpu\_metrics\_table memory leak (no CVSS, Linux)
- [CVE-2025-0236](https://cve.now/CVE-2025-0236.md): Out-of-bounds vulnerability in slope processing during curve rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver (CVSS 5.3, Canon Generic PCL6 V4 Printer Driver · Canon Generic UFR… +1)
- [CVE-2022-49293](https://cve.now/CVE-2022-49293.md): netfilter: nf\_tables: initialize registers in nft\_do\_chain() (no CVSS, Linux)
- [CVE-2022-49292](https://cve.now/CVE-2022-49292.md): ALSA: oss: Fix PCM OSS buffer allocation overflow (CVSS 7.8, Linux)
- [CVE-2022-49291](https://cve.now/CVE-2022-49291.md): ALSA: pcm: Fix races among concurrent hw\_params and hw\_free calls (CVSS 7.8, Linux)
- [CVE-2022-49290](https://cve.now/CVE-2022-49290.md): mac80211: fix potential double free on mesh join (CVSS 7.8, Linux)
- [CVE-2022-49289](https://cve.now/CVE-2022-49289.md): uaccess: fix integer overflow on access\_ok() (CVSS 7.8, Linux)
- [CVE-2022-49288](https://cve.now/CVE-2022-49288.md): ALSA: pcm: Fix races among concurrent prealloc proc writes (CVSS 7.8, Linux)
- [CVE-2022-49287](https://cve.now/CVE-2022-49287.md): tpm: fix reference counting for struct tpm\_chip (CVSS 7.0, Linux)
- [CVE-2022-49286](https://cve.now/CVE-2022-49286.md): tpm: use try\_get\_ops() in tpm-space.c (no CVSS, Linux)
- [CVE-2022-49285](https://cve.now/CVE-2022-49285.md): iio: accel: mma8452: use the correct logic to get mma8452\_data (no CVSS, Linux)
- [CVE-2025-0235](https://cve.now/CVE-2025-0235.md): Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Prin (CVSS 5.3, Canon Generic PCL6 V4 Printer Driver · Canon Generic UFR… +1)
- [CVE-2022-49284](https://cve.now/CVE-2022-49284.md): coresight: syscfg: Fix memleak on registration failure in cscfg\_create\_device (CVSS 5.5, Linux)
- [CVE-2022-49283](https://cve.now/CVE-2022-49283.md): firmware: sysfb: fix platform-device leak in error path (no CVSS, Linux)
- [CVE-2022-49282](https://cve.now/CVE-2022-49282.md): f2fs: quota: fix loop condition at f2fs\_quota\_sync() (CVSS 5.5, Linux)
- [CVE-2022-49281](https://cve.now/CVE-2022-49281.md): cifs: fix handlecache and multiuser (no CVSS, Linux)
- [CVE-2022-49280](https://cve.now/CVE-2022-49280.md): NFSD: prevent underflow in nfssvc\_decode\_writeargs() (CVSS 9.8, Linux)
- [CVE-2022-49279](https://cve.now/CVE-2022-49279.md): NFSD: prevent integer overflow on 32 bit systems (CVSS 8.2, Linux)
- [CVE-2022-49278](https://cve.now/CVE-2022-49278.md): remoteproc: Fix count check in rproc\_coredump\_write() (no CVSS, Linux)
- [CVE-2022-49277](https://cve.now/CVE-2022-49277.md): jffs2: fix memory leak in jffs2\_do\_mount\_fs (CVSS 5.5, Linux)
- [CVE-2022-49276](https://cve.now/CVE-2022-49276.md): jffs2: fix memory leak in jffs2\_scan\_medium (CVSS 5.5, Linux)
- [CVE-2022-49275](https://cve.now/CVE-2022-49275.md): can: m\_can: m\_can\_tx\_handler(): fix use after free of skb (CVSS 7.8, Linux)
- [CVE-2022-49274](https://cve.now/CVE-2022-49274.md): ocfs2: fix crash when mount with quota enabled (CVSS 7.8, Linux)
- [CVE-2022-49273](https://cve.now/CVE-2022-49273.md): rtc: pl031: fix rtc features null pointer dereference (CVSS 5.5, Linux)
- [CVE-2022-49272](https://cve.now/CVE-2022-49272.md): ALSA: pcm: Fix potential AB/BA lock with buffer\_mutex and mmap\_lock (no CVSS, Linux)
- [CVE-2022-49271](https://cve.now/CVE-2022-49271.md): cifs: prevent bad output lengths in smb2\_ioctl\_query\_info() (no CVSS, Linux)
- [CVE-2022-49270](https://cve.now/CVE-2022-49270.md): dm: fix use-after-free in dm\_cleanup\_zoned\_dev() (CVSS 7.8, Linux)
- [CVE-2022-49269](https://cve.now/CVE-2022-49269.md): can: isotp: sanitize CAN ID checks in isotp\_bind() (no CVSS, Linux)
- [CVE-2022-49268](https://cve.now/CVE-2022-49268.md): ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (no CVSS, Linux)
- [CVE-2022-49266](https://cve.now/CVE-2022-49266.md): block: fix rq-qos breakage from skipping rq\_qos\_done\_bio() (no CVSS, Linux)
- [CVE-2022-49265](https://cve.now/CVE-2022-49265.md): PM: domains: Fix sleep-in-atomic bug caused by genpd\_debug\_remove() (no CVSS, Linux)
- [CVE-2022-49264](https://cve.now/CVE-2022-49264.md): exec: Force single empty string when argv is empty (CVSS 7.8, Linux)
- [CVE-2022-49263](https://cve.now/CVE-2022-49263.md): brcmfmac: pcie: Release firmwares in the brcmf\_pcie\_setup error path (no CVSS, Linux)
- [CVE-2022-49262](https://cve.now/CVE-2022-49262.md): crypto: octeontx2 - remove CONFIG\_DM\_CRYPT check (no CVSS, Linux)
- [CVE-2022-49261](https://cve.now/CVE-2022-49261.md): drm/i915/gem: add missing boundary check in vm\_access (CVSS 7.8, Linux)
- [CVE-2022-49260](https://cve.now/CVE-2022-49260.md): crypto: hisilicon/sec - fix the aead software fallback for engine (CVSS 9.8, Linux)
- [CVE-2022-49259](https://cve.now/CVE-2022-49259.md): block: don't delete queue kobject before its children (no CVSS, Linux)
- [CVE-2022-49258](https://cve.now/CVE-2022-49258.md): crypto: ccree - Fix use after free in cc\_cipher\_exit() (CVSS 7.8, Linux)
- [CVE-2022-49257](https://cve.now/CVE-2022-49257.md): watch\_queue: Fix NULL dereference in error cleanup (no CVSS, Linux)
- [CVE-2022-49256](https://cve.now/CVE-2022-49256.md): watch\_queue: Actually free the watch (no CVSS, Linux)
- [CVE-2022-49255](https://cve.now/CVE-2022-49255.md): f2fs: fix missing free nid in f2fs\_handle\_failed\_inode (no CVSS, Linux)
- [CVE-2022-49254](https://cve.now/CVE-2022-49254.md): media: ti-vpe: cal: Fix a NULL pointer dereference in cal\_ctx\_v4l2\_init\_formats() (no CVSS, Linux)
- [CVE-2022-49253](https://cve.now/CVE-2022-49253.md): media: usb: go7007: s2250-board: fix leak in probe() (no CVSS, Linux)
- [CVE-2022-49252](https://cve.now/CVE-2022-49252.md): ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type (no CVSS, Linux)
- [CVE-2022-49251](https://cve.now/CVE-2022-49251.md): ASoC: codecs: va-macro: fix accessing array out of bounds for enum type (no CVSS, Linux)
- [CVE-2022-49250](https://cve.now/CVE-2022-49250.md): ASoC: codecs: rx-macro: fix accessing compander for aux (no CVSS, Linux)
- [CVE-2022-49249](https://cve.now/CVE-2022-49249.md): ASoC: codecs: wc938x: fix accessing array out of bounds for enum type (no CVSS, Linux)
- [CVE-2022-49248](https://cve.now/CVE-2022-49248.md): ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (no CVSS, Linux)
- [CVE-2022-49247](https://cve.now/CVE-2022-49247.md): media: stk1160: If start stream fails, return buffers with VB2\_BUF\_STATE\_QUEUED (no CVSS, Linux)
- [CVE-2022-49246](https://cve.now/CVE-2022-49246.md): ASoC: atmel: Fix error handling in snd\_proto\_probe (no CVSS, Linux)
- [CVE-2022-49245](https://cve.now/CVE-2022-49245.md): ASoC: rockchip: Fix PM usage reference of rockchip\_i2s\_tdm\_resume (no CVSS, Linux)
- [CVE-2022-49244](https://cve.now/CVE-2022-49244.md): ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192\_mt6359\_dev\_probe (no CVSS, Linux)
- [CVE-2022-49243](https://cve.now/CVE-2022-49243.md): ASoC: atmel: Add missing of\_node\_put() in at91sam9g20ek\_audio\_probe (no CVSS, Linux)
- [CVE-2022-49242](https://cve.now/CVE-2022-49242.md): ASoC: mxs: Fix error handling in mxs\_sgtl5000\_probe (CVSS 5.5, Linux)
- [CVE-2022-49241](https://cve.now/CVE-2022-49241.md): ASoC: atmel: Fix error handling in sam9x5\_wm8731\_driver\_probe (CVSS 5.5, Linux)
- [CVE-2022-49240](https://cve.now/CVE-2022-49240.md): ASoC: mediatek: mt8195: Fix error handling in mt8195\_mt6359\_rt1019\_rt5682\_dev\_probe (CVSS 5.5, Linux)
- [CVE-2022-49239](https://cve.now/CVE-2022-49239.md): ASoC: codecs: wcd934x: Add missing of\_node\_put() in wcd934x\_codec\_parse\_data (CVSS 5.5, Linux)
- [CVE-2022-49238](https://cve.now/CVE-2022-49238.md): ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 (CVSS 8.8, Linux)
- [CVE-2022-49237](https://cve.now/CVE-2022-49237.md): ath11k: add missing of\_node\_put() to avoid leak (CVSS 5.5, Linux)
- [CVE-2022-49236](https://cve.now/CVE-2022-49236.md): bpf: Fix UAF due to race between btf\_try\_get\_module and load\_module (CVSS 7.8, Linux)
- [CVE-2022-49235](https://cve.now/CVE-2022-49235.md): ath9k\_htc: fix uninit value bugs (CVSS 5.5, Linux)
- [CVE-2022-49234](https://cve.now/CVE-2022-49234.md): net: dsa: Avoid cross-chip syncing of VLAN filtering (CVSS 7.8, Linux)
- [CVE-2022-49233](https://cve.now/CVE-2022-49233.md): drm/amd/display: Call dc\_stream\_release for remove link enc assignment (CVSS 5.5, Linux)
- [CVE-2022-49232](https://cve.now/CVE-2022-49232.md): drm/amd/display: Fix a NULL pointer dereference in amdgpu\_dm\_connector\_add\_common\_modes() (CVSS 5.5, Linux)
- [CVE-2022-49231](https://cve.now/CVE-2022-49231.md): rtw88: fix memory overrun and memory leak during hw\_scan (CVSS 7.8, Linux)
- [CVE-2022-49230](https://cve.now/CVE-2022-49230.md): mt76: mt7915: fix possible memory leak in mt7915\_mcu\_add\_sta (CVSS 5.5, Linux)
- [CVE-2022-49229](https://cve.now/CVE-2022-49229.md): ptp: unregister virtual clocks when unregistering physical clock. (no CVSS, Linux)
- [CVE-2022-49228](https://cve.now/CVE-2022-49228.md): bpf: Fix a btf decl\_tag bug when tagging a function (no CVSS, Linux)
- [CVE-2022-49227](https://cve.now/CVE-2022-49227.md): igc: avoid kernel warning when changing RX ring parameters (no CVSS, Linux)
- [CVE-2022-49226](https://cve.now/CVE-2022-49226.md): net: asix: add proper error handling of usb read errors (no CVSS, Linux)
- [CVE-2022-49225](https://cve.now/CVE-2022-49225.md): mt76: mt7921s: fix a possible memory leak in mt7921\_load\_patch (CVSS 5.5, Linux)
- [CVE-2022-49224](https://cve.now/CVE-2022-49224.md): power: supply: ab8500: Fix memory leak in ab8500\_fg\_sysfs\_init (CVSS 5.5, Linux)
- [CVE-2022-49223](https://cve.now/CVE-2022-49223.md): cxl/port: Hold port reference until decoder release (CVSS 7.8, Linux)
- [CVE-2022-49222](https://cve.now/CVE-2022-49222.md): drm/bridge: anx7625: Fix overflow issue on reading EDID (no CVSS, Linux)
- [CVE-2022-49221](https://cve.now/CVE-2022-49221.md): drm/msm/dp: populate connector of struct dp\_panel (CVSS 5.5, Linux)
- [CVE-2022-49220](https://cve.now/CVE-2022-49220.md): dax: make sure inodes are flushed before destroy cache (no CVSS, Linux)
- [CVE-2022-49219](https://cve.now/CVE-2022-49219.md): vfio/pci: fix memory leak during D3hot to D0 transition (no CVSS, Linux)
- [CVE-2022-49218](https://cve.now/CVE-2022-49218.md): drm/dp: Fix OOB read when handling Post Cursor2 register (CVSS 7.1, Linux)
- [CVE-2022-49217](https://cve.now/CVE-2022-49217.md): scsi: pm8001: Fix abort all task initialization (no CVSS, Linux)
- [CVE-2022-49216](https://cve.now/CVE-2022-49216.md): drm/tegra: Fix reference leak in tegra\_dsi\_ganged\_probe (CVSS 5.5, Linux)
- [CVE-2022-49215](https://cve.now/CVE-2022-49215.md): xsk: Fix race at socket teardown (CVSS 7.8, Linux)
- [CVE-2022-49214](https://cve.now/CVE-2022-49214.md): powerpc/64s: Don't use DSISR for SLB faults (no CVSS, Linux)
- [CVE-2022-49213](https://cve.now/CVE-2022-49213.md): ath10k: Fix error handling in ath10k\_setup\_msa\_resources (CVSS 5.5, Linux)
- [CVE-2022-49212](https://cve.now/CVE-2022-49212.md): mtd: rawnand: atmel: fix refcount issue in atmel\_nand\_controller\_init (CVSS 5.5, Linux)
- [CVE-2022-49211](https://cve.now/CVE-2022-49211.md): mips: cdmm: Fix refcount leak in mips\_cdmm\_phys\_base (CVSS 5.5, Linux)
- [CVE-2022-49210](https://cve.now/CVE-2022-49210.md): MIPS: pgalloc: fix memory leak caused by pgd\_free() (CVSS 5.5, Linux)
- [CVE-2022-49209](https://cve.now/CVE-2022-49209.md): bpf, sockmap: Fix memleak in tcp\_bpf\_sendmsg while sk msg is full (CVSS 5.5, Linux)
- [CVE-2022-49208](https://cve.now/CVE-2022-49208.md): RDMA/irdma: Prevent some integer underflows (CVSS 5.5, Linux)
- [CVE-2022-49207](https://cve.now/CVE-2022-49207.md): bpf, sockmap: Fix memleak in sk\_psock\_queue\_msg (CVSS 5.5, Linux)
- [CVE-2022-49206](https://cve.now/CVE-2022-49206.md): RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (CVSS 5.5, Linux)
- [CVE-2022-49205](https://cve.now/CVE-2022-49205.md): bpf, sockmap: Fix double uncharge the mem of sk\_msg (no CVSS, Linux)
- [CVE-2022-49204](https://cve.now/CVE-2022-49204.md): bpf, sockmap: Fix more uncharged while msg has more\_data (no CVSS, Linux)
- [CVE-2022-49203](https://cve.now/CVE-2022-49203.md): drm/amd/display: Fix double free during GPU reset on DC streams (CVSS 7.8, Linux)
- [CVE-2022-49202](https://cve.now/CVE-2022-49202.md): Bluetooth: hci\_uart: add missing NULL check in h5\_enqueue (no CVSS, Linux)
- [CVE-2022-49201](https://cve.now/CVE-2022-49201.md): ibmvnic: fix race between xmit and reset (CVSS 9.8, Linux)
- [CVE-2022-49200](https://cve.now/CVE-2022-49200.md): Bluetooth: btmtksdio: Fix kernel oops in btmtksdio\_interrupt (no CVSS, Linux)
- [CVE-2022-49199](https://cve.now/CVE-2022-49199.md): RDMA/nldev: Prevent underflow in nldev\_stat\_set\_counter\_dynamic\_doit() (no CVSS, Linux)
- [CVE-2022-49198](https://cve.now/CVE-2022-49198.md): mptcp: Fix crash due to tcp\_tsorted\_anchor was initialized before release skb (no CVSS, Linux)
- [CVE-2022-49197](https://cve.now/CVE-2022-49197.md): af\_netlink: Fix shift out of bounds in group mask calculation (no CVSS, Linux)
- [CVE-2022-49196](https://cve.now/CVE-2022-49196.md): powerpc/pseries: Fix use after free in remove\_phb\_dynamic() (CVSS 7.8, Linux)
- [CVE-2022-49195](https://cve.now/CVE-2022-49195.md): net: dsa: fix panic on shutdown if multi-chip tree failed to probe (no CVSS, Linux)
- [CVE-2022-49194](https://cve.now/CVE-2022-49194.md): net: bcmgenet: Use stronger register read/writes to assure ordering (CVSS 9.8, Linux)
- [CVE-2022-49193](https://cve.now/CVE-2022-49193.md): ice: fix 'scheduling while atomic' on aux critical err interrupt (no CVSS, Linux)
- [CVE-2022-49192](https://cve.now/CVE-2022-49192.md): drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (no CVSS, Linux)
- [CVE-2022-49191](https://cve.now/CVE-2022-49191.md): mxser: fix xmit\_buf leak in activate when LSR == 0xff (no CVSS, Linux)
- [CVE-2022-49190](https://cve.now/CVE-2022-49190.md): kernel/resource: fix kfree() of bootmem memory again (no CVSS, Linux)
- [CVE-2022-49189](https://cve.now/CVE-2022-49189.md): clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (no CVSS, Linux)
- [CVE-2022-49188](https://cve.now/CVE-2022-49188.md): remoteproc: qcom\_q6v5\_mss: Fix some leaks in q6v5\_alloc\_memory\_region (no CVSS, Linux)
- [CVE-2022-49187](https://cve.now/CVE-2022-49187.md): clk: Fix clk\_hw\_get\_clk() when dev is NULL (CVSS 5.5, Linux)
- [CVE-2022-49186](https://cve.now/CVE-2022-49186.md): clk: visconti: prevent array overflow in visconti\_clk\_register\_gates() (CVSS 7.8, Linux)
- [CVE-2022-49185](https://cve.now/CVE-2022-49185.md): pinctrl: nomadik: Add missing of\_node\_put() in nmk\_pinctrl\_probe (CVSS 5.5, Linux)
- [CVE-2022-49184](https://cve.now/CVE-2022-49184.md): net: sparx5: switchdev: fix possible NULL pointer dereference (CVSS 5.5, Linux)
- [CVE-2022-49183](https://cve.now/CVE-2022-49183.md): net/sched: act\_ct: fix ref leak when switching zones (CVSS 5.5, Linux)
- [CVE-2022-49182](https://cve.now/CVE-2022-49182.md): net: hns3: add vlan list lock to protect vlan list (CVSS 7.8, Linux)
- [CVE-2022-49180](https://cve.now/CVE-2022-49180.md): LSM: general protection fault in legacy\_parse\_param (no CVSS, Linux)
- [CVE-2022-49179](https://cve.now/CVE-2022-49179.md): block, bfq: don't move oom\_bfqq (CVSS 7.8, Linux)
- [CVE-2022-49178](https://cve.now/CVE-2022-49178.md): memstick/mspro\_block: fix handling of read-only devices (CVSS 7.8, Linux)
- [CVE-2022-49177](https://cve.now/CVE-2022-49177.md): hwrng: cavium - fix NULL but dereferenced coccicheck error (CVSS 5.5, Linux)
- [CVE-2022-49176](https://cve.now/CVE-2022-49176.md): bfq: fix use-after-free in bfq\_dispatch\_request (CVSS 7.8, Linux)
- [CVE-2022-49175](https://cve.now/CVE-2022-49175.md): PM: core: keep irq flags in device\_pm\_check\_callbacks() (no CVSS, Linux)
- [CVE-2022-49174](https://cve.now/CVE-2022-49174.md): ext4: fix ext4\_mb\_mark\_bb() with flex\_bg with fast\_commit (CVSS 7.8, Linux)
- [CVE-2022-49173](https://cve.now/CVE-2022-49173.md): spi: fsi: Implement a timeout for polling status (no CVSS, Linux)
- [CVE-2022-49172](https://cve.now/CVE-2022-49172.md): parisc: Fix non-access data TLB cache flush faults (CVSS 7.8, Linux)
- [CVE-2022-49171](https://cve.now/CVE-2022-49171.md): ext4: don't BUG if someone dirty pages without asking ext4 first (no CVSS, Linux)
- [CVE-2022-49170](https://cve.now/CVE-2022-49170.md): f2fs: fix to do sanity check on curseg-\>alloc\_type (CVSS 7.8, Linux)
- [CVE-2022-49169](https://cve.now/CVE-2022-49169.md): f2fs: use spin\_lock to avoid hang (no CVSS, Linux)
- [CVE-2022-49168](https://cve.now/CVE-2022-49168.md): btrfs: do not clean up repair bio if submit fails (CVSS 7.8, Linux)
- [CVE-2022-49167](https://cve.now/CVE-2022-49167.md): btrfs: do not double complete bio on errors during compressed reads (CVSS 7.8, Linux)
- [CVE-2022-49166](https://cve.now/CVE-2022-49166.md): ntfs: add sanity check on allocation size (no CVSS, Linux)
- [CVE-2022-49165](https://cve.now/CVE-2022-49165.md): media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (no CVSS, Linux)
- [CVE-2022-49164](https://cve.now/CVE-2022-49164.md): powerpc/tm: Fix more userspace r13 corruption (no CVSS, Linux)
- [CVE-2022-49163](https://cve.now/CVE-2022-49163.md): media: imx-jpeg: fix a bug of accessing array out of bounds (CVSS 7.1, Linux)
- [CVE-2022-49162](https://cve.now/CVE-2022-49162.md): video: fbdev: sm712fb: Fix crash in smtcfb\_write() (CVSS 7.8, Linux)
- [CVE-2022-49161](https://cve.now/CVE-2022-49161.md): ASoC: mediatek: Fix error handling in mt8183\_da7219\_max98357\_dev\_probe (no CVSS, Linux)
- [CVE-2022-49160](https://cve.now/CVE-2022-49160.md): scsi: qla2xxx: Fix crash during module load unload test (CVSS 7.5, Linux)
- [CVE-2022-49159](https://cve.now/CVE-2022-49159.md): scsi: qla2xxx: Implement ref count for SRB (CVSS 8.8, Linux)
- [CVE-2022-49158](https://cve.now/CVE-2022-49158.md): scsi: qla2xxx: Fix warning message due to adisc being flushed (no CVSS, Linux)
- [CVE-2022-49157](https://cve.now/CVE-2022-49157.md): scsi: qla2xxx: Fix premature hw access after PCI error (no CVSS, Linux)
- [CVE-2022-49156](https://cve.now/CVE-2022-49156.md): scsi: qla2xxx: Fix scheduling while atomic (no CVSS, Linux)
- [CVE-2022-49155](https://cve.now/CVE-2022-49155.md): scsi: qla2xxx: Suppress a kernel complaint in qla\_create\_qpair() (CVSS 5.5, Linux)
- [CVE-2022-49154](https://cve.now/CVE-2022-49154.md): KVM: SVM: fix panic on out-of-bounds guest IRQ (CVSS 7.8, Linux)
- [CVE-2022-49153](https://cve.now/CVE-2022-49153.md): wireguard: socket: free skb in send6 when ipv6 is disabled (CVSS 5.5, Linux)
- [CVE-2022-49152](https://cve.now/CVE-2022-49152.md): XArray: Fix xas\_create\_range() when multi-order entry present (no CVSS, Linux)
- [CVE-2022-49151](https://cve.now/CVE-2022-49151.md): can: mcba\_usb: properly check endpoint type (no CVSS, Linux)
- [CVE-2022-49150](https://cve.now/CVE-2022-49150.md): rtc: gamecube: Fix refcount leak in gamecube\_rtc\_read\_offset\_from\_sram (CVSS 5.5, Linux)
- [CVE-2022-49149](https://cve.now/CVE-2022-49149.md): rxrpc: Fix call timer start racing with call destruction (CVSS 9.8, Linux)
- [CVE-2022-49148](https://cve.now/CVE-2022-49148.md): watch\_queue: Free the page array when watch\_queue is dismantled (CVSS 5.5, Linux)
- [CVE-2022-49147](https://cve.now/CVE-2022-49147.md): block: Fix the maximum minor value is blk\_alloc\_ext\_minor() (no CVSS, Linux)
- [CVE-2022-49146](https://cve.now/CVE-2022-49146.md): virtio: use virtio\_device\_ready() in virtio\_device\_restore() (no CVSS, Linux)
- [CVE-2022-49145](https://cve.now/CVE-2022-49145.md): ACPI: CPPC: Avoid out of bounds access when parsing \_CPC data (no CVSS, Linux)
- [CVE-2022-49144](https://cve.now/CVE-2022-49144.md): io\_uring: fix memory leak of uid in files registration (CVSS 5.5, Linux)
- [CVE-2022-49142](https://cve.now/CVE-2022-49142.md): net: preserve skb\_end\_offset() in skb\_unclone\_keeptruesize() (CVSS 7.5, Linux)
- [CVE-2022-49141](https://cve.now/CVE-2022-49141.md): net: dsa: felix: fix possible NULL pointer dereference (CVSS 5.5, Linux)
- [CVE-2022-49139](https://cve.now/CVE-2022-49139.md): Bluetooth: fix null ptr deref on hci\_sync\_conn\_complete\_evt (CVSS 5.5, Linux)
- [CVE-2022-49138](https://cve.now/CVE-2022-49138.md): Bluetooth: hci\_event: Ignore multiple conn complete events (CVSS 8.8, Linux)
- [CVE-2022-49137](https://cve.now/CVE-2022-49137.md): drm/amd/amdgpu/amdgpu\_cs: fix refcount leak of a dma\_fence obj (CVSS 5.5, Linux)
- [CVE-2022-49136](https://cve.now/CVE-2022-49136.md): Bluetooth: hci\_sync: Fix queuing commands when HCI\_UNREGISTER is set (CVSS 7.8, Linux)
- [CVE-2022-49135](https://cve.now/CVE-2022-49135.md): drm/amd/display: Fix memory leak (CVSS 5.5, Linux)
- [CVE-2022-49134](https://cve.now/CVE-2022-49134.md): mlxsw: spectrum: Guard against invalid local ports (CVSS 5.5, Linux)
- [CVE-2022-49133](https://cve.now/CVE-2022-49133.md): drm/amdkfd: svm range restore work deadlock when process exit (no CVSS, Linux)
- [CVE-2022-49132](https://cve.now/CVE-2022-49132.md): ath11k: pci: fix crash on suspend if board file is not found (no CVSS, Linux)
- [CVE-2022-49131](https://cve.now/CVE-2022-49131.md): ath11k: fix kernel panic during unload/load ath11k modules (CVSS 5.5, Linux)
- [CVE-2022-49130](https://cve.now/CVE-2022-49130.md): ath11k: mhi: use mhi\_sync\_power\_up() (CVSS 5.5, Linux)
- [CVE-2022-49129](https://cve.now/CVE-2022-49129.md): mt76: mt7921: fix crash when startup fails. (CVSS 7.8, Linux)
- [CVE-2022-49128](https://cve.now/CVE-2022-49128.md): drm/bridge: Add missing pm\_runtime\_put\_sync (CVSS 5.5, Linux)
- [CVE-2022-49127](https://cve.now/CVE-2022-49127.md): ref\_tracker: implement use-after-free detection (CVSS 7.0, Linux)
- [CVE-2022-49126](https://cve.now/CVE-2022-49126.md): scsi: mpi3mr: Fix memory leaks (CVSS 5.5, Linux)
- [CVE-2022-49125](https://cve.now/CVE-2022-49125.md): drm/sprd: fix potential NULL dereference (CVSS 5.5, Linux)
- [CVE-2022-49124](https://cve.now/CVE-2022-49124.md): x86/mce: Work around an erratum on fast string copy instructions (no CVSS, Linux)
- [CVE-2022-49123](https://cve.now/CVE-2022-49123.md): ath11k: Fix frames flush failure caused by deadlock (CVSS 5.5, Linux)
- [CVE-2022-49122](https://cve.now/CVE-2022-49122.md): dm ioctl: prevent potential spectre v1 gadget (no CVSS, Linux)
- [CVE-2022-49121](https://cve.now/CVE-2022-49121.md): scsi: pm8001: Fix tag leaks on error (no CVSS, Linux)
- [CVE-2022-49120](https://cve.now/CVE-2022-49120.md): scsi: pm8001: Fix task leak in pm8001\_send\_abort\_all() (no CVSS, Linux)
- [CVE-2022-49119](https://cve.now/CVE-2022-49119.md): scsi: pm8001: Fix memory leak in pm8001\_chip\_fw\_flash\_update\_req() (CVSS 5.5, Linux)
- [CVE-2022-49118](https://cve.now/CVE-2022-49118.md): scsi: hisi\_sas: Free irq vectors in order for v3 HW (no CVSS, Linux)
- [CVE-2022-49117](https://cve.now/CVE-2022-49117.md): mips: ralink: fix a refcount leak in ill\_acc\_of\_setup() (CVSS 5.5, Linux)
- [CVE-2022-49116](https://cve.now/CVE-2022-49116.md): Bluetooth: use memset avoid memory leaks (CVSS 5.5, Linux)
- [CVE-2022-49115](https://cve.now/CVE-2022-49115.md): PCI: endpoint: Fix misused goto label (CVSS 5.5, Linux)
- [CVE-2022-49114](https://cve.now/CVE-2022-49114.md): scsi: libfc: Fix use after free in fc\_exch\_abts\_resp() (CVSS 8.8, Linux)
- [CVE-2022-49113](https://cve.now/CVE-2022-49113.md): powerpc/secvar: fix refcount leak in format\_show() (CVSS 5.5, Linux)
- [CVE-2022-49112](https://cve.now/CVE-2022-49112.md): mt76: fix monitor mode crash with sdio driver (no CVSS, Linux)
- [CVE-2022-49111](https://cve.now/CVE-2022-49111.md): Bluetooth: Fix use after free in hci\_send\_acl (CVSS 8.8, Linux)
- [CVE-2022-49110](https://cve.now/CVE-2022-49110.md): netfilter: conntrack: revisit gc autotuning (CVSS 7.5, Linux)
- [CVE-2022-49109](https://cve.now/CVE-2022-49109.md): ceph: fix inode reference leakage in ceph\_get\_snapdir() (no CVSS, Linux)
- [CVE-2022-49108](https://cve.now/CVE-2022-49108.md): clk: mediatek: Fix memory leaks on probe (CVSS 5.5, Linux)
- [CVE-2022-49107](https://cve.now/CVE-2022-49107.md): ceph: fix memory leak in ceph\_readdir when note\_last\_dentry returns error (CVSS 5.5, Linux)
- [CVE-2022-49106](https://cve.now/CVE-2022-49106.md): staging: vchiq\_arm: Avoid NULL ptr deref in vchiq\_dump\_platform\_instances (CVSS 5.5, Linux)
- [CVE-2022-49105](https://cve.now/CVE-2022-49105.md): staging: wfx: fix an error handling in wfx\_init\_common() (CVSS 5.5, Linux)
- [CVE-2022-49104](https://cve.now/CVE-2022-49104.md): staging: vchiq\_core: handle NULL result of find\_service\_by\_handle (CVSS 5.5, Linux)
- [CVE-2022-49103](https://cve.now/CVE-2022-49103.md): NFSv4.2: fix reference count leaks in \_nfs42\_proc\_copy\_notify() (CVSS 5.5, Linux)
- [CVE-2022-49102](https://cve.now/CVE-2022-49102.md): habanalabs: fix possible memory leak in MMU DR fini (CVSS 5.5, Linux)
- [CVE-2022-49100](https://cve.now/CVE-2022-49100.md): virtio\_console: eliminate anonymous module\_init & module\_exit (no CVSS, Linux)
- [CVE-2022-49099](https://cve.now/CVE-2022-49099.md): Drivers: hv: vmbus: Fix initialization of device object in vmbus\_device\_register() (no CVSS, Linux)
- [CVE-2022-49098](https://cve.now/CVE-2022-49098.md): Drivers: hv: vmbus: Fix potential crash on module unload (no CVSS, Linux)
- [CVE-2022-49097](https://cve.now/CVE-2022-49097.md): NFS: Avoid writeback threads getting stuck in mempool\_alloc() (no CVSS, Linux)
- [CVE-2022-49096](https://cve.now/CVE-2022-49096.md): net: sfc: add missing xdp queue reinitialization (CVSS 7.8, Linux)
- [CVE-2022-49095](https://cve.now/CVE-2022-49095.md): scsi: zorro7xx: Fix a resource leak in zorro7xx\_remove\_one() (no CVSS, Linux)
- [CVE-2022-49094](https://cve.now/CVE-2022-49094.md): net/tls: fix slab-out-of-bounds bug in decrypt\_internal (CVSS 9.8, Linux)
- [CVE-2022-49093](https://cve.now/CVE-2022-49093.md): skbuff: fix coalescing for page\_pool fragment recycling (CVSS 9.8, Linux)
- [CVE-2022-49092](https://cve.now/CVE-2022-49092.md): net: ipv4: fix route with nexthop object delete warning (CVSS 7.1, Linux)
- [CVE-2022-49091](https://cve.now/CVE-2022-49091.md): drm/imx: Fix memory leak in imx\_pd\_connector\_get\_modes (no CVSS, Linux)
- [CVE-2022-49090](https://cve.now/CVE-2022-49090.md): arch/arm64: Fix topology initialization for core scheduling (no CVSS, Linux)
- [CVE-2022-49089](https://cve.now/CVE-2022-49089.md): IB/rdmavt: add lock to call to rvt\_error\_qp to prevent a race condition (CVSS 7.8, Linux)
- [CVE-2022-49088](https://cve.now/CVE-2022-49088.md): dpaa2-ptp: Fix refcount leak in dpaa2\_ptp\_probe (no CVSS, Linux)
- [CVE-2022-49087](https://cve.now/CVE-2022-49087.md): rxrpc: fix a race in rxrpc\_exit\_net() (CVSS 7.8, Linux)
- [CVE-2022-49086](https://cve.now/CVE-2022-49086.md): net: openvswitch: fix leak of nested actions (no CVSS, Linux)
- [CVE-2022-49085](https://cve.now/CVE-2022-49085.md): drbd: Fix five use after free bugs in get\_initial\_state (CVSS 7.8, Linux)
- [CVE-2022-49084](https://cve.now/CVE-2022-49084.md): qede: confirm skb is allocated before using (CVSS 7.5, Linux)
- [CVE-2022-49083](https://cve.now/CVE-2022-49083.md): iommu/omap: Fix regression in probe for NULL pointer dereference (no CVSS, Linux)
- [CVE-2022-49082](https://cve.now/CVE-2022-49082.md): scsi: mpt3sas: Fix use after free in \_scsih\_expander\_node\_remove() (CVSS 7.8, Linux)
- [CVE-2022-49081](https://cve.now/CVE-2022-49081.md): highmem: fix checks in \_\_kmap\_local\_sched\_{in,out} (no CVSS, Linux)
- [CVE-2022-49080](https://cve.now/CVE-2022-49080.md): mm/mempolicy: fix mpol\_new leak in shared\_policy\_replace (no CVSS, Linux)
- [CVE-2022-49079](https://cve.now/CVE-2022-49079.md): btrfs: zoned: traverse devices under chunk\_mutex in btrfs\_can\_activate\_zone (no CVSS, Linux)
- [CVE-2022-49078](https://cve.now/CVE-2022-49078.md): lz4: fix LZ4\_decompress\_safe\_partial read out of bound (CVSS 7.8, Linux)
- [CVE-2022-49077](https://cve.now/CVE-2022-49077.md): mmmremap.c: avoid pointless invalidate\_range\_start/end on mremap(old\_size=0) (no CVSS, Linux)
- [CVE-2022-49076](https://cve.now/CVE-2022-49076.md): RDMA/hfi1: Fix use-after-free bug for mm struct (CVSS 7.8, Linux)
- [CVE-2022-49075](https://cve.now/CVE-2022-49075.md): btrfs: fix qgroup reserve overflow the qgroup limit (CVSS 8.1, Linux)
- [CVE-2022-49074](https://cve.now/CVE-2022-49074.md): irqchip/gic-v3: Fix GICR\_CTLR.RWP polling (no CVSS, Linux)
- [CVE-2022-49073](https://cve.now/CVE-2022-49073.md): ata: sata\_dwc\_460ex: Fix crash due to OOB write (CVSS 7.8, Linux)
- [CVE-2022-49072](https://cve.now/CVE-2022-49072.md): gpio: Restrict usage of GPIO chip irq members before initialization (no CVSS, Linux)
- [CVE-2022-49071](https://cve.now/CVE-2022-49071.md): drm/panel: ili9341: fix optional regulator handling (CVSS 5.5, Linux)
- [CVE-2022-49070](https://cve.now/CVE-2022-49070.md): fbdev: Fix unregistering of framebuffers without device (CVSS 5.5, Linux)
- [CVE-2022-49069](https://cve.now/CVE-2022-49069.md): drm/amd/display: Fix by adding FPU protection for dcn30\_internal\_validate\_bw (no CVSS, Linux)
- [CVE-2022-49068](https://cve.now/CVE-2022-49068.md): btrfs: release correct delalloc amount in direct IO write path (no CVSS, Linux)
- [CVE-2022-49067](https://cve.now/CVE-2022-49067.md): powerpc: Fix virt\_addr\_valid() for 64-bit Book3E & 32-bit (no CVSS, Linux)
- [CVE-2022-49066](https://cve.now/CVE-2022-49066.md): veth: Ensure eth header is in skb's linear part (no CVSS, Linux)
- [CVE-2022-49065](https://cve.now/CVE-2022-49065.md): SUNRPC: Fix the svc\_deferred\_event trace class (CVSS 7.5, Linux)
- [CVE-2022-49064](https://cve.now/CVE-2022-49064.md): cachefiles: unmark inode in use in error path (no CVSS, Linux)
- [CVE-2022-49063](https://cve.now/CVE-2022-49063.md): ice: arfs: fix use-after-free when freeing @rx\_cpu\_rmap (CVSS 7.8, Linux)
- [CVE-2022-49062](https://cve.now/CVE-2022-49062.md): cachefiles: Fix KASAN slab-out-of-bounds in cachefiles\_set\_volume\_xattr (CVSS 7.8, Linux)
- [CVE-2022-49061](https://cve.now/CVE-2022-49061.md): net: ethernet: stmmac: fix altr\_tse\_pcs function when using a fixed-link (CVSS 5.5, Linux)
- [CVE-2022-49060](https://cve.now/CVE-2022-49060.md): net/smc: Fix NULL pointer dereference in smc\_pnet\_find\_ib() (CVSS 5.5, Linux)
- [CVE-2022-49059](https://cve.now/CVE-2022-49059.md): nfc: nci: add flush\_workqueue to prevent uaf (CVSS 7.8, Linux)
- [CVE-2022-49058](https://cve.now/CVE-2022-49058.md): cifs: potential buffer overflow in handling symlinks (CVSS 9.1, Linux)
- [CVE-2022-49057](https://cve.now/CVE-2022-49057.md): block: null\_blk: end timed out poll request (no CVSS, Linux)
- [CVE-2022-49055](https://cve.now/CVE-2022-49055.md): drm/amdkfd: Check for potential null return of kmalloc\_array() (CVSS 5.5, Linux)
- [CVE-2022-49054](https://cve.now/CVE-2022-49054.md): Drivers: hv: vmbus: Deactivate sysctl\_record\_panic\_msg by default in isolated guests (CVSS 7.1, Linux)
- [CVE-2022-49053](https://cve.now/CVE-2022-49053.md): scsi: target: tcmu: Fix possible page UAF (CVSS 7.8, Linux)
- [CVE-2022-49052](https://cve.now/CVE-2022-49052.md): mm: fix unexpected zeroed page mapping with zram swap (CVSS 7.1, Linux)
- [CVE-2022-49051](https://cve.now/CVE-2022-49051.md): net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (no CVSS, Linux)
- [CVE-2022-49050](https://cve.now/CVE-2022-49050.md): memory: renesas-rpc-if: fix platform-device leak in error path (no CVSS, Linux)
- [CVE-2022-49049](https://cve.now/CVE-2022-49049.md): mm/secretmem: fix panic when growing a memfd\_secret (no CVSS, Linux)
- [CVE-2022-49048](https://cve.now/CVE-2022-49048.md): ipv6: fix panic when forwarding a pkt with no in6 dev (CVSS 7.5, Linux)
- [CVE-2022-49047](https://cve.now/CVE-2022-49047.md): ep93xx: clock: Fix UAF in ep93xx\_clk\_register\_gate() (CVSS 7.8, Linux)
- [CVE-2022-49046](https://cve.now/CVE-2022-49046.md): i2c: dev: check return value when calling dev\_set\_name() (no CVSS, Linux)
- [CVE-2022-49044](https://cve.now/CVE-2022-49044.md): dm integrity: fix memory corruption when tag\_size is less than digest size (no CVSS, Linux)
- [CVE-2021-47657](https://cve.now/CVE-2021-47657.md): drm/virtio: Ensure that objs is not NULL in virtio\_gpu\_array\_put\_free() (CVSS 5.5, Linux)
- [CVE-2021-47656](https://cve.now/CVE-2021-47656.md): jffs2: fix use-after-free in jffs2\_clear\_xattr\_subsystem (CVSS 7.8, Linux)
- [CVE-2021-47655](https://cve.now/CVE-2021-47655.md): media: venus: vdec: fixed possible memory leak issue (CVSS 5.5, Linux)
- [CVE-2021-47654](https://cve.now/CVE-2021-47654.md): samples/landlock: Fix path\_list memory leak (CVSS 5.5, Linux)
- [CVE-2021-47653](https://cve.now/CVE-2021-47653.md): media: davinci: vpif: fix use-after-free on driver unbind (CVSS 7.8, Linux)
- [CVE-2021-47652](https://cve.now/CVE-2021-47652.md): video: fbdev: smscufx: Fix null-ptr-deref in ufx\_usb\_probe() (CVSS 5.5, Linux)
- [CVE-2021-47651](https://cve.now/CVE-2021-47651.md): soc: qcom: rpmpd: Check for null return of devm\_kcalloc (CVSS 5.5, Linux)
- [CVE-2021-47650](https://cve.now/CVE-2021-47650.md): ASoC: soc-compress: prevent the potentially use of null pointer (no CVSS, Linux)
- [CVE-2021-47649](https://cve.now/CVE-2021-47649.md): udmabuf: validate ubuf-\>pagecount (no CVSS, Linux)
- [CVE-2021-47648](https://cve.now/CVE-2021-47648.md): gpu: host1x: Fix a memory leak in 'host1x\_remove()' (CVSS 5.5, Linux)
- [CVE-2021-47647](https://cve.now/CVE-2021-47647.md): clk: qcom: ipq8074: fix PCI-E clock oops (no CVSS, Linux)
- [CVE-2021-47646](https://cve.now/CVE-2021-47646.md): Revert "Revert "block, bfq: honor already-setup queue merges"" (CVSS 7.8, Linux)
- [CVE-2021-47645](https://cve.now/CVE-2021-47645.md): media: staging: media: zoran: calculate the right buffer number for zoran\_reap\_stat\_com (CVSS 5.5, Linux)
- [CVE-2021-47644](https://cve.now/CVE-2021-47644.md): media: staging: media: zoran: move videodev alloc (CVSS 5.5, Linux)
- [CVE-2021-47643](https://cve.now/CVE-2021-47643.md): media: ir\_toy: free before error exiting (no CVSS, Linux)
- [CVE-2021-47642](https://cve.now/CVE-2021-47642.md): video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (no CVSS, Linux)
- [CVE-2021-47641](https://cve.now/CVE-2021-47641.md): video: fbdev: cirrusfb: check pixclock to avoid divide by zero (CVSS 5.5, Linux)
- [CVE-2021-47640](https://cve.now/CVE-2021-47640.md): powerpc/kasan: Fix early region not updated correctly (CVSS 7.8, Linux)
- [CVE-2021-47639](https://cve.now/CVE-2021-47639.md): KVM: x86/mmu: Zap \_all\_ roots when unmapping gfn range in TDP MMU (CVSS 7.8, Linux)
- [CVE-2021-47638](https://cve.now/CVE-2021-47638.md): ubifs: rename\_whiteout: Fix double free for whiteout\_ui-\>data (CVSS 7.8, Linux)
- [CVE-2021-47637](https://cve.now/CVE-2021-47637.md): ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (CVSS 5.5, Linux)
- [CVE-2021-47636](https://cve.now/CVE-2021-47636.md): ubifs: Fix read out-of-bounds in ubifs\_wbuf\_write\_nolock() (CVSS 7.1, Linux)
- [CVE-2021-47635](https://cve.now/CVE-2021-47635.md): ubifs: Fix to add refcount once page is set private (CVSS 7.8, Linux)
- [CVE-2021-47634](https://cve.now/CVE-2021-47634.md): ubi: Fix race condition between ctrl\_cdev\_ioctl and ubi\_cdev\_ioctl (CVSS 7.8, Linux)
- [CVE-2021-47633](https://cve.now/CVE-2021-47633.md): ath5k: fix OOB in ath5k\_eeprom\_read\_pcal\_info\_5111 (no CVSS, Linux)
- [CVE-2021-47632](https://cve.now/CVE-2021-47632.md): powerpc/set\_memory: Avoid spinlock recursion in change\_page\_attr() (CVSS 5.5, Linux)
- [CVE-2021-47631](https://cve.now/CVE-2021-47631.md): ARM: davinci: da850-evm: Avoid NULL pointer dereference (CVSS 5.5, Linux)
- [CVE-2025-0234](https://cve.now/CVE-2025-0234.md): Out-of-bounds vulnerability in curve segmentation processing of Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic (CVSS 5.3, Canon Generic PCL6 V4 Printer Driver · Canon Generic UFR… +1)
- [CVE-2025-22881](https://cve.now/CVE-2025-22881.md): Heap-based Buffer Overflow in CNCSoft-G2 (CVSS 8.4, Delta Electronics CNCSoft-G2)
- [CVE-2025-0889](https://cve.now/CVE-2025-0889.md): Privilege Management for Windows – Elevation of Privilege (CVSS 7.2, BeyondTrust Privilege Management for Windows)
- [CVE-2024-46226](https://cve.now/CVE-2024-46226.md): A stored cross site scripting (XSS) vulnerability in HelpDeskZ \< v2.0.2 allows remote attackers to execute arbitrary JavaScript in the admin (CVSS 4.8)
- [CVE-2024-50684](https://cve.now/CVE-2024-50684.md): SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). (CVSS 6.5)
- [CVE-2024-50685](https://cve.now/CVE-2024-50685.md): SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationS (CVSS 9.1)
- [CVE-2024-50686](https://cve.now/CVE-2024-50686.md): SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService (CVSS 9.1)
- [CVE-2024-50687](https://cve.now/CVE-2024-50687.md): SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API (CVSS 9.1)
- [CVE-2024-50688](https://cve.now/CVE-2024-50688.md): SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. (CVSS 9.8)
- [CVE-2024-50689](https://cve.now/CVE-2024-50689.md): SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API (CVSS 9.1)
- [CVE-2024-50691](https://cve.now/CVE-2024-50691.md): SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. (CVSS 7.4)
- [CVE-2024-50693](https://cve.now/CVE-2024-50693.md): SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService AP (CVSS 9.1)
- [CVE-2024-50696](https://cve.now/CVE-2024-50696.md): SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. (CVSS 7.5)
- [CVE-2024-52925](https://cve.now/CVE-2024-52925.md): In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature f (CVSS 6.8, OPSWAT MetaDefender Kiosk)
- [CVE-2024-53427](https://cve.now/CVE-2024-53427.md): decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack- (CVSS 8.1, jqlang jq)
- [CVE-2024-53573](https://cve.now/CVE-2024-53573.md): Unifiedtransform v2.X is vulnerable to Incorrect Access Control. (CVSS 9.8)
- [CVE-2024-55581](https://cve.now/CVE-2024-55581.md): When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack be (CVSS 7.4)
- [CVE-2024-57040](https://cve.now/CVE-2024-57040.md): TP-Link TL-WR845N devices with firmware TL-WR845N(UN)\_V4\_200909 and TL-WR845N(UN)\_V4\_190219 was discovered to contain a hardcoded password f (CVSS 9.8)
- [CVE-2024-57423](https://cve.now/CVE-2024-57423.md): A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid para (CVSS 6.1)
- [CVE-2025-25462](https://cve.now/CVE-2025-25462.md): A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote at (CVSS 5.5)
- [CVE-2025-25783](https://cve.now/CVE-2025-25783.md): An arbitrary file upload vulnerability in the component admin\\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via (CVSS 9.8)
- [CVE-2025-25784](https://cve.now/CVE-2025-25784.md): An arbitrary file upload vulnerability in the component \\c\\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary c (CVSS 9.8)
- [CVE-2025-25785](https://cve.now/CVE-2025-25785.md): JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \\c\\PluginsController.php. (CVSS 9.1)
- [CVE-2025-25789](https://cve.now/CVE-2025-25789.md): FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \\controller\\Sitemap.php. (CVSS 9.8)
- [CVE-2025-25790](https://cve.now/CVE-2025-25790.md): An arbitrary file upload vulnerability in the component \\controller\\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary (CVSS 9.8)
- [CVE-2025-25791](https://cve.now/CVE-2025-25791.md): An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via up (CVSS 4.4)
- [CVE-2025-25792](https://cve.now/CVE-2025-25792.md): SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin\_weixin.php. (CVSS 4.4)
- [CVE-2025-25793](https://cve.now/CVE-2025-25793.md): SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin\_notify.php. (CVSS 5.1)
- [CVE-2025-25794](https://cve.now/CVE-2025-25794.md): SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin\_ping.php. (CVSS 5.1)
- [CVE-2025-25796](https://cve.now/CVE-2025-25796.md): SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin\_template.php. (CVSS 5.1)
- [CVE-2025-25797](https://cve.now/CVE-2025-25797.md): SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin\_smtp.php. (CVSS 5.1)
- [CVE-2025-25799](https://cve.now/CVE-2025-25799.md): SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file\_get\_contents function at admin\_safe.php. (CVSS 6.0)
- [CVE-2025-25800](https://cve.now/CVE-2025-25800.md): SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file\_get\_contents function at admin\_safe\_file.php. (CVSS 5.3)
- [CVE-2025-25802](https://cve.now/CVE-2025-25802.md): SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin\_ip.php. (CVSS 5.1)
- [CVE-2025-25813](https://cve.now/CVE-2025-25813.md): SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin\_files.php. (CVSS 5.1)
- [CVE-2025-25818](https://cve.now/CVE-2025-25818.md): A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra (CVSS 5.1)
- [CVE-2025-25823](https://cve.now/CVE-2025-25823.md): A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra (CVSS 7.3)
- [CVE-2025-25825](https://cve.now/CVE-2025-25825.md): A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra (CVSS 7.1)
- [CVE-2025-25827](https://cve.now/CVE-2025-25827.md): A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via sup (CVSS 6.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-02-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.