# CVEs published 2025-06-18

413 CVEs were published on June 18, 2025: 11 critical, 100 high. Days are UTC.

- [CVE-2025-24288](https://cve.now/CVE-2025-24288.md): The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and mult (CVSS 9.8, Versa Director)
- [CVE-2025-24291](https://cve.now/CVE-2025-24291.md): The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. (CVSS 6.1, Versa Director)
- [CVE-2024-45208](https://cve.now/CVE-2024-45208.md): The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. (CVSS 9.8, Versa Director)
- [CVE-2025-23171](https://cve.now/CVE-2025-23171.md): The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. (CVSS 7.2, Versa Director)
- [CVE-2025-23168](https://cve.now/CVE-2025-23168.md): The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via ema (CVSS 6.3, Versa Director)
- [CVE-2025-24286](https://cve.now/CVE-2025-24286.md): A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. (CVSS 7.2, Veeam Backup and Recovery)
- [CVE-2025-23172](https://cve.now/CVE-2025-23172.md): The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints. (CVSS 7.2, Versa Director)
- [CVE-2025-23173](https://cve.now/CVE-2025-23173.md): The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. (CVSS 7.5, Versa Director)
- [CVE-2025-23169](https://cve.now/CVE-2025-23169.md): The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. (CVSS 6.1, Versa Director)
- [CVE-2025-23170](https://cve.now/CVE-2025-23170.md): The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via S (CVSS 6.7, Versa Director)
- [CVE-2025-23121](https://cve.now/CVE-2025-23121.md): A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user (CVSS 9.9, Veeam Backup and Recovery)
- [CVE-2025-24287](https://cve.now/CVE-2025-24287.md): A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with ele (CVSS 6.1, Veeam Backup for Microsoft Windows)
- [CVE-2025-49591](https://cve.now/CVE-2025-49591.md): CryptPad 2FA Bypass Vulnerability (CVSS 7.4, cryptpad)
- [CVE-2025-49590](https://cve.now/CVE-2025-49590.md): CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability (CVSS 2.9, cryptpad)
- [CVE-2025-6192](https://cve.now/CVE-2025-6192.md): Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a cr (CVSS 8.8, Google Chrome)
- [CVE-2025-6191](https://cve.now/CVE-2025-6191.md): Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access (CVSS 8.8, Google Chrome)
- [CVE-2025-20260](https://cve.now/CVE-2025-20260.md): ClamAV PDF Scanning Buffer Overflow Vulnerability (CVSS 9.8, Cisco ClamAV)
- [CVE-2025-20271](https://cve.now/CVE-2025-20271.md): Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability (CVSS 8.6, Cisco Meraki MX Firmware)
- [CVE-2025-1349](https://cve.now/CVE-2025-1349.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting (CVSS 5.5, IBM Sterling B2B Integrator)
- [CVE-2025-20234](https://cve.now/CVE-2025-20234.md): ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.3, Cisco Secure Endpoint)
- [CVE-2025-1348](https://cve.now/CVE-2025-1348.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure (CVSS 4.0, IBM Sterling B2B Integrator)
- [CVE-2024-54172](https://cve.now/CVE-2024-54172.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgery (CVSS 4.3, IBM Sterling B2B Integrator)
- [CVE-2025-36049](https://cve.now/CVE-2025-36049.md): IBM webMethods Integration Sever XML external entity injection (CVSS 8.8, IBM webMethods Integration Server)
- [CVE-2025-36048](https://cve.now/CVE-2025-36048.md): IBM webMethods Integration Sever code execution (CVSS 7.2, IBM webMethods Integration Server)
- [CVE-2025-4821](https://cve.now/CVE-2025-4821.md): Incorrect congestion window growth by invalid ACK ranges (CVSS 7.5, Cloudflare quiche)
- [CVE-2025-4820](https://cve.now/CVE-2025-4820.md): Incorrect congestion window growth by optimistic ACK (CVSS 5.3, Cloudflare quiche)
- [CVE-2024-54183](https://cve.now/CVE-2024-54183.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting (CVSS 5.4, IBM Sterling B2B Integrator)
- [CVE-2025-6240](https://cve.now/CVE-2025-6240.md): Profisee Path Traversal Vulnerability (CVSS 5.0, Profisee)
- [CVE-2025-6220](https://cve.now/CVE-2025-6220.md): Ultimate Addons for Contact Form 7 \<= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save\_options' (CVSS 7.2, themefic Ultra Addons for Contact Form)
- [CVE-2022-50232](https://cve.now/CVE-2022-50232.md): arm64: set UXN on swapper page tables (no CVSS, Linux)
- [CVE-2022-50231](https://cve.now/CVE-2022-50231.md): crypto: arm64/poly1305 - fix a read out-of-bound (CVSS 7.1, Linux)
- [CVE-2022-50230](https://cve.now/CVE-2022-50230.md): arm64: set UXN on swapper page tables (no CVSS, Linux)
- [CVE-2022-50229](https://cve.now/CVE-2022-50229.md): ALSA: bcd2000: Fix a UAF bug on the error path of probing (no CVSS, Linux)
- [CVE-2022-50228](https://cve.now/CVE-2022-50228.md): KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (no CVSS, Linux)
- [CVE-2022-50227](https://cve.now/CVE-2022-50227.md): KVM: x86/xen: Initialize Xen timer only once (CVSS 7.8, Linux)
- [CVE-2022-50226](https://cve.now/CVE-2022-50226.md): crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (no CVSS, Linux)
- [CVE-2022-50225](https://cve.now/CVE-2022-50225.md): riscv:uprobe fix SR\_SPIE set/clear handling (no CVSS, Linux)
- [CVE-2022-50224](https://cve.now/CVE-2022-50224.md): KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT (no CVSS, Linux)
- [CVE-2022-50223](https://cve.now/CVE-2022-50223.md): LoongArch: cpuinfo: Fix a warning for CONFIG\_CPUMASK\_OFFSTACK (no CVSS, Linux)
- [CVE-2022-50222](https://cve.now/CVE-2022-50222.md): tty: vt: initialize unicode screen buffer (no CVSS, Linux)
- [CVE-2022-50221](https://cve.now/CVE-2022-50221.md): drm/fb-helper: Fix out-of-bounds access (CVSS 7.8, Linux)
- [CVE-2022-50220](https://cve.now/CVE-2022-50220.md): usbnet: Fix linkwatch use-after-free on disconnect (no CVSS, Linux)
- [CVE-2022-50219](https://cve.now/CVE-2022-50219.md): bpf: Fix KASAN use-after-free Read in compute\_effective\_progs (CVSS 7.8, Linux)
- [CVE-2022-50218](https://cve.now/CVE-2022-50218.md): iio: light: isl29028: Fix the warning in isl29028\_remove() (no CVSS, Linux)
- [CVE-2022-50217](https://cve.now/CVE-2022-50217.md): fuse: write inode in fuse\_release() (no CVSS, Linux)
- [CVE-2022-50215](https://cve.now/CVE-2022-50215.md): scsi: sg: Allow waiting for commands to complete on removed device (CVSS 7.8, Linux)
- [CVE-2022-50214](https://cve.now/CVE-2022-50214.md): coresight: Clear the connection field properly (no CVSS, Linux)
- [CVE-2022-50213](https://cve.now/CVE-2022-50213.md): netfilter: nf\_tables: do not allow SET\_ID to refer to another table (CVSS 7.8, Linux)
- [CVE-2022-50212](https://cve.now/CVE-2022-50212.md): netfilter: nf\_tables: do not allow CHAIN\_ID to refer to another table (CVSS 7.8, Linux)
- [CVE-2022-50211](https://cve.now/CVE-2022-50211.md): md-raid10: fix KASAN warning (no CVSS, Linux)
- [CVE-2022-50210](https://cve.now/CVE-2022-50210.md): MIPS: cpuinfo: Fix a warning for CONFIG\_CPUMASK\_OFFSTACK (no CVSS, Linux)
- [CVE-2022-50209](https://cve.now/CVE-2022-50209.md): meson-mx-socinfo: Fix refcount leak in meson\_mx\_socinfo\_init (no CVSS, Linux)
- [CVE-2022-50208](https://cve.now/CVE-2022-50208.md): soc: amlogic: Fix refcount leak in meson-secure-pwrc.c (no CVSS, Linux)
- [CVE-2022-50207](https://cve.now/CVE-2022-50207.md): ARM: bcm: Fix refcount leak in bcm\_kona\_smc\_init (no CVSS, Linux)
- [CVE-2022-50206](https://cve.now/CVE-2022-50206.md): arm64: fix oops in concurrently setting insn\_emulation sysctls (no CVSS, Linux)
- [CVE-2022-50205](https://cve.now/CVE-2022-50205.md): ext2: Add more validity checks for inode counts (no CVSS, Linux)
- [CVE-2022-50204](https://cve.now/CVE-2022-50204.md): ARM: OMAP2+: pdata-quirks: Fix refcount leak bug (no CVSS, Linux)
- [CVE-2022-50203](https://cve.now/CVE-2022-50203.md): ARM: OMAP2+: display: Fix refcount leak bug (no CVSS, Linux)
- [CVE-2022-50202](https://cve.now/CVE-2022-50202.md): PM: hibernate: defer device probing when resuming from hibernation (no CVSS, Linux)
- [CVE-2022-50201](https://cve.now/CVE-2022-50201.md): selinux: fix memleak in security\_read\_state\_kernel() (no CVSS, Linux)
- [CVE-2022-50200](https://cve.now/CVE-2022-50200.md): selinux: Add boundary check in put\_entry() (CVSS 7.8, Linux)
- [CVE-2022-50199](https://cve.now/CVE-2022-50199.md): ARM: OMAP2+: Fix refcount leak in omapdss\_init\_of (no CVSS, Linux)
- [CVE-2022-50198](https://cve.now/CVE-2022-50198.md): ARM: OMAP2+: Fix refcount leak in omap3xxx\_prm\_late\_init (no CVSS, Linux)
- [CVE-2022-50197](https://cve.now/CVE-2022-50197.md): cpufreq: zynq: Fix refcount leak in zynq\_get\_revision (no CVSS, Linux)
- [CVE-2022-50196](https://cve.now/CVE-2022-50196.md): soc: qcom: ocmem: Fix refcount leak in of\_get\_ocmem (no CVSS, Linux)
- [CVE-2022-50195](https://cve.now/CVE-2022-50195.md): ARM: dts: qcom: replace gcc PXO with pxo\_board fixed clock (no CVSS, Linux)
- [CVE-2022-50194](https://cve.now/CVE-2022-50194.md): soc: qcom: aoss: Fix refcount leak in qmp\_cooling\_devices\_register (no CVSS, Linux)
- [CVE-2022-50193](https://cve.now/CVE-2022-50193.md): erofs: wake up all waiters after z\_erofs\_lzma\_head ready (no CVSS, Linux)
- [CVE-2022-50192](https://cve.now/CVE-2022-50192.md): spi: tegra20-slink: fix UAF in tegra\_slink\_remove() (no CVSS, Linux)
- [CVE-2022-50191](https://cve.now/CVE-2022-50191.md): regulator: of: Fix refcount leak bug in of\_get\_regulation\_constraints() (no CVSS, Linux)
- [CVE-2022-50190](https://cve.now/CVE-2022-50190.md): spi: Fix simplification of devm\_spi\_register\_controller (no CVSS, Linux)
- [CVE-2022-50189](https://cve.now/CVE-2022-50189.md): tools/power turbostat: Fix file pointer leak (no CVSS, Linux)
- [CVE-2022-50188](https://cve.now/CVE-2022-50188.md): drm/meson: Fix refcount leak in meson\_encoder\_hdmi\_init (no CVSS, Linux)
- [CVE-2022-50187](https://cve.now/CVE-2022-50187.md): ath11k: fix netdev open race (no CVSS, Linux)
- [CVE-2022-50186](https://cve.now/CVE-2022-50186.md): ath11k: fix missing skb drop on htc\_tx\_completion error (no CVSS, Linux)
- [CVE-2022-50185](https://cve.now/CVE-2022-50185.md): drm/radeon: fix potential buffer overflow in ni\_set\_mc\_special\_registers() (no CVSS, Linux)
- [CVE-2022-50184](https://cve.now/CVE-2022-50184.md): drm/meson: encoder\_hdmi: Fix refcount leak in meson\_encoder\_hdmi\_init (no CVSS, Linux)
- [CVE-2022-50183](https://cve.now/CVE-2022-50183.md): drm/meson: encoder\_cvbs: Fix refcount leak in meson\_encoder\_cvbs\_init (no CVSS, Linux)
- [CVE-2022-50182](https://cve.now/CVE-2022-50182.md): media: imx-jpeg: Align upwards buffer size (CVSS 7.8, Linux)
- [CVE-2022-50181](https://cve.now/CVE-2022-50181.md): virtio-gpu: fix a missing check to avoid NULL dereference (no CVSS, Linux)
- [CVE-2022-50179](https://cve.now/CVE-2022-50179.md): ath9k: fix use-after-free in ath9k\_hif\_usb\_rx\_cb (no CVSS, Linux)
- [CVE-2022-50178](https://cve.now/CVE-2022-50178.md): wifi: rtw89: 8852a: rfk: fix div 0 exception (no CVSS, Linux)
- [CVE-2022-50177](https://cve.now/CVE-2022-50177.md): rcutorture: Fix ksoftirqd boosting timing and iteration (no CVSS, Linux)
- [CVE-2022-50176](https://cve.now/CVE-2022-50176.md): drm/mcde: Fix refcount leak in mcde\_dsi\_bind (no CVSS, Linux)
- [CVE-2022-50175](https://cve.now/CVE-2022-50175.md): media: tw686x: Fix memory leak in tw686x\_video\_init (no CVSS, Linux)
- [CVE-2022-50174](https://cve.now/CVE-2022-50174.md): net: hinic: avoid kernel hung in hinic\_get\_stats64() (no CVSS, Linux)
- [CVE-2022-50173](https://cve.now/CVE-2022-50173.md): drm/msm/mdp5: Fix global state lock backoff (no CVSS, Linux)
- [CVE-2022-50172](https://cve.now/CVE-2022-50172.md): mt76: mt76x02u: fix possible memory leak in \_\_mt76x02u\_mcu\_send\_msg (no CVSS, Linux)
- [CVE-2022-50171](https://cve.now/CVE-2022-50171.md): crypto: hisilicon/sec - don't sleep when in softirq (CVSS 7.5, Linux)
- [CVE-2022-50170](https://cve.now/CVE-2022-50170.md): kunit: executor: Fix a memory leak on failure in kunit\_filter\_tests (no CVSS, Linux)
- [CVE-2022-50169](https://cve.now/CVE-2022-50169.md): wifi: wil6210: debugfs: fix info leak in wil\_write\_file\_wmi() (no CVSS, Linux)
- [CVE-2022-50168](https://cve.now/CVE-2022-50168.md): bpf, x86: fix freeing of not-finalized bpf\_prog\_pack (CVSS 7.8, Linux)
- [CVE-2022-50167](https://cve.now/CVE-2022-50167.md): bpf: fix potential 32-bit overflow when accessing ARRAY map element (CVSS 7.8, Linux)
- [CVE-2022-50166](https://cve.now/CVE-2022-50166.md): Bluetooth: When HCI work queue is drained, only queue chained work (no CVSS, Linux)
- [CVE-2022-50165](https://cve.now/CVE-2022-50165.md): wifi: wil6210: debugfs: fix uninitialized variable use in \`wil\_write\_file\_wmi()\` (no CVSS, Linux)
- [CVE-2022-50164](https://cve.now/CVE-2022-50164.md): wifi: iwlwifi: mvm: fix double list\_add at iwl\_mvm\_mac\_wake\_tx\_queue (CVSS 8.8, Linux)
- [CVE-2022-50163](https://cve.now/CVE-2022-50163.md): ax25: fix incorrect dev\_tracker usage (no CVSS, Linux)
- [CVE-2022-50162](https://cve.now/CVE-2022-50162.md): wifi: libertas: Fix possible refcount leak in if\_usb\_probe() (no CVSS, Linux)
- [CVE-2022-50161](https://cve.now/CVE-2022-50161.md): mtd: maps: Fix refcount leak in of\_flash\_probe\_versatile (no CVSS, Linux)
- [CVE-2022-50160](https://cve.now/CVE-2022-50160.md): mtd: maps: Fix refcount leak in ap\_flash\_init (no CVSS, Linux)
- [CVE-2022-50159](https://cve.now/CVE-2022-50159.md): of: check previous kernel's ima-kexec-buffer against memory bounds (no CVSS, Linux)
- [CVE-2022-50158](https://cve.now/CVE-2022-50158.md): mtd: partitions: Fix refcount leak in parse\_redboot\_of (no CVSS, Linux)
- [CVE-2022-50157](https://cve.now/CVE-2022-50157.md): PCI: microchip: Fix refcount leak in mc\_pcie\_init\_irq\_domains() (no CVSS, Linux)
- [CVE-2022-50156](https://cve.now/CVE-2022-50156.md): HID: cp2112: prevent a buffer overflow in cp2112\_xfer() (CVSS 7.8, Linux)
- [CVE-2022-50155](https://cve.now/CVE-2022-50155.md): mtd: parsers: ofpart: Fix refcount leak in bcm4908\_partitions\_fw\_offset (no CVSS, Linux)
- [CVE-2022-50154](https://cve.now/CVE-2022-50154.md): PCI: mediatek-gen3: Fix refcount leak in mtk\_pcie\_init\_irq\_domains() (no CVSS, Linux)
- [CVE-2022-50153](https://cve.now/CVE-2022-50153.md): usb: host: Fix refcount leak in ehci\_hcd\_ppc\_of\_probe (no CVSS, Linux)
- [CVE-2022-50152](https://cve.now/CVE-2022-50152.md): usb: ohci-nxp: Fix refcount leak in ohci\_hcd\_nxp\_probe (no CVSS, Linux)
- [CVE-2022-50151](https://cve.now/CVE-2022-50151.md): usb: cdns3: fix random warning message when driver load (no CVSS, Linux)
- [CVE-2022-50149](https://cve.now/CVE-2022-50149.md): driver core: fix potential deadlock in \_\_driver\_attach (no CVSS, Linux)
- [CVE-2022-50148](https://cve.now/CVE-2022-50148.md): kernfs: fix potential NULL dereference in \_\_kernfs\_remove (no CVSS, Linux)
- [CVE-2022-50147](https://cve.now/CVE-2022-50147.md): mm/mempolicy: fix get\_nodes out of bound access (no CVSS, Linux)
- [CVE-2022-50146](https://cve.now/CVE-2022-50146.md): PCI: dwc: Deallocate EPC memory on dw\_pcie\_ep\_init() errors (no CVSS, Linux)
- [CVE-2022-50145](https://cve.now/CVE-2022-50145.md): dmaengine: sf-pdma: Add multithread support for a DMA channel (CVSS 7.8, Linux)
- [CVE-2022-50144](https://cve.now/CVE-2022-50144.md): soundwire: revisit driver bind/unbind and callbacks (no CVSS, Linux)
- [CVE-2022-50143](https://cve.now/CVE-2022-50143.md): intel\_th: Fix a resource leak in an error handling path (no CVSS, Linux)
- [CVE-2022-50142](https://cve.now/CVE-2022-50142.md): intel\_th: msu: Fix vmalloced buffers (no CVSS, Linux)
- [CVE-2022-50141](https://cve.now/CVE-2022-50141.md): mmc: sdhci-of-esdhc: Fix refcount leak in esdhc\_signal\_voltage\_switch (no CVSS, Linux)
- [CVE-2022-50140](https://cve.now/CVE-2022-50140.md): memstick/ms\_block: Fix a memory leak (no CVSS, Linux)
- [CVE-2022-50139](https://cve.now/CVE-2022-50139.md): usb: aspeed-vhub: Fix refcount leak bug in ast\_vhub\_init\_desc() (no CVSS, Linux)
- [CVE-2022-50138](https://cve.now/CVE-2022-50138.md): RDMA/qedr: Fix potential memory leak in \_\_qedr\_alloc\_mr() (no CVSS, Linux)
- [CVE-2022-50137](https://cve.now/CVE-2022-50137.md): RDMA/irdma: Fix a window for use-after-free (CVSS 7.8, Linux)
- [CVE-2022-50136](https://cve.now/CVE-2022-50136.md): RDMA/siw: Fix duplicated reported IW\_CM\_EVENT\_CONNECT\_REPLY event (CVSS 7.5, Linux)
- [CVE-2022-50135](https://cve.now/CVE-2022-50135.md): RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe\_qp\_do\_cleanup (no CVSS, Linux)
- [CVE-2022-50134](https://cve.now/CVE-2022-50134.md): RDMA/hfi1: fix potential memory leak in setup\_base\_ctxt() (no CVSS, Linux)
- [CVE-2022-50133](https://cve.now/CVE-2022-50133.md): usb: xhci\_plat\_remove: avoid NULL dereference (no CVSS, Linux)
- [CVE-2022-50132](https://cve.now/CVE-2022-50132.md): usb: cdns3: change place of 'priv\_ep' assignment in cdns3\_gadget\_ep\_dequeue(), cdns3\_gadget\_ep\_enable() (no CVSS, Linux)
- [CVE-2022-50131](https://cve.now/CVE-2022-50131.md): HID: mcp2221: prevent a buffer overflow in mcp\_smbus\_write() (CVSS 7.8, Linux)
- [CVE-2022-50130](https://cve.now/CVE-2022-50130.md): staging: fbtft: core: set smem\_len before fb\_deferred\_io\_init call (no CVSS, Linux)
- [CVE-2022-50129](https://cve.now/CVE-2022-50129.md): RDMA/srpt: Fix a use-after-free (CVSS 7.0, Linux)
- [CVE-2022-50127](https://cve.now/CVE-2022-50127.md): RDMA/rxe: Fix error unwind in rxe\_create\_qp() (no CVSS, Linux)
- [CVE-2022-50126](https://cve.now/CVE-2022-50126.md): jbd2: fix assertion 'jh-\>b\_frozen\_data == NULL' failure when journal aborted (no CVSS, Linux)
- [CVE-2022-50125](https://cve.now/CVE-2022-50125.md): ASoC: cros\_ec\_codec: Fix refcount leak in cros\_ec\_codec\_platform\_probe (no CVSS, Linux)
- [CVE-2022-50124](https://cve.now/CVE-2022-50124.md): ASoC: mt6797-mt6351: Fix refcount leak in mt6797\_mt6351\_dev\_probe (no CVSS, Linux)
- [CVE-2022-50123](https://cve.now/CVE-2022-50123.md): ASoC: mediatek: mt8173: Fix refcount leak in mt8173\_rt5650\_rt5676\_dev\_probe (no CVSS, Linux)
- [CVE-2022-50122](https://cve.now/CVE-2022-50122.md): ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173\_rt5650\_dev\_probe (no CVSS, Linux)
- [CVE-2022-50121](https://cve.now/CVE-2022-50121.md): remoteproc: k3-r5: Fix refcount leak in k3\_r5\_cluster\_of\_init (no CVSS, Linux)
- [CVE-2022-50120](https://cve.now/CVE-2022-50120.md): remoteproc: imx\_rproc: Fix refcount leak in imx\_rproc\_addr\_init (no CVSS, Linux)
- [CVE-2022-50119](https://cve.now/CVE-2022-50119.md): rpmsg: Fix possible refcount leak in rpmsg\_register\_device\_override() (no CVSS, Linux)
- [CVE-2022-50118](https://cve.now/CVE-2022-50118.md): powerpc/perf: Optimize clearing the pending PMI and remove WARN\_ON for PMI check in power\_pmu\_disable (no CVSS, Linux)
- [CVE-2022-50117](https://cve.now/CVE-2022-50117.md): vfio: Split migration ops from main device ops (no CVSS, Linux)
- [CVE-2022-50116](https://cve.now/CVE-2022-50116.md): tty: n\_gsm: fix deadlock and link starvation in outgoing data path (no CVSS, Linux)
- [CVE-2022-50115](https://cve.now/CVE-2022-50115.md): ASoC: SOF: ipc3-topology: Prevent double freeing of ipc\_control\_data via load\_bytes (no CVSS, Linux)
- [CVE-2022-50114](https://cve.now/CVE-2022-50114.md): net: 9p: fix refcount leak in p9\_read\_work() error handling (no CVSS, Linux)
- [CVE-2022-50113](https://cve.now/CVE-2022-50113.md): ASoc: audio-graph-card2: Fix refcount leak bug in \_\_graph\_get\_type() (no CVSS, Linux)
- [CVE-2022-50112](https://cve.now/CVE-2022-50112.md): rpmsg: qcom\_smd: Fix refcount leak in qcom\_smd\_parse\_edge (no CVSS, Linux)
- [CVE-2022-50111](https://cve.now/CVE-2022-50111.md): ASoC: mt6359: Fix refcount leak bug (no CVSS, Linux)
- [CVE-2022-50110](https://cve.now/CVE-2022-50110.md): watchdog: sp5100\_tco: Fix a memory leak of EFCH MMIO resource (no CVSS, Linux)
- [CVE-2022-50109](https://cve.now/CVE-2022-50109.md): video: fbdev: amba-clcd: Fix refcount leak bugs (no CVSS, Linux)
- [CVE-2022-50108](https://cve.now/CVE-2022-50108.md): mfd: max77620: Fix refcount leak in max77620\_initialise\_fps (no CVSS, Linux)
- [CVE-2022-50107](https://cve.now/CVE-2022-50107.md): cifs: Fix memory leak when using fscache (no CVSS, Linux)
- [CVE-2022-50106](https://cve.now/CVE-2022-50106.md): powerpc/cell/axon\_msi: Fix refcount leak in setup\_msi\_msg\_address (no CVSS, Linux)
- [CVE-2022-50105](https://cve.now/CVE-2022-50105.md): powerpc/spufs: Fix refcount leak in spufs\_init\_isolated\_loader (no CVSS, Linux)
- [CVE-2022-50104](https://cve.now/CVE-2022-50104.md): powerpc/xive: Fix refcount leak in xive\_get\_max\_prio (no CVSS, Linux)
- [CVE-2022-50103](https://cve.now/CVE-2022-50103.md): sched, cpuset: Fix dl\_cpu\_busy() panic due to empty cs-\>cpus\_allowed (no CVSS, Linux)
- [CVE-2022-50102](https://cve.now/CVE-2022-50102.md): video: fbdev: arkfb: Fix a divide-by-zero bug in ark\_set\_pixclock() (no CVSS, Linux)
- [CVE-2022-50101](https://cve.now/CVE-2022-50101.md): video: fbdev: vt8623fb: Check the size of screen before memset\_io() (CVSS 7.8, Linux)
- [CVE-2022-50100](https://cve.now/CVE-2022-50100.md): sched/core: Do not requeue task on CPU excluded from cpus\_mask (no CVSS, Linux)
- [CVE-2022-50099](https://cve.now/CVE-2022-50099.md): video: fbdev: arkfb: Check the size of screen before memset\_io() (CVSS 7.8, Linux)
- [CVE-2022-50098](https://cve.now/CVE-2022-50098.md): scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (CVSS 8.8, Linux)
- [CVE-2022-50097](https://cve.now/CVE-2022-50097.md): video: fbdev: s3fb: Check the size of screen before memset\_io() (CVSS 7.1, Linux)
- [CVE-2022-50096](https://cve.now/CVE-2022-50096.md): x86/kprobes: Update kcb status flag after singlestepping (no CVSS, Linux)
- [CVE-2022-50095](https://cve.now/CVE-2022-50095.md): posix-cpu-timers: Cleanup CPU timers before freeing them during exec (CVSS 7.8, Linux)
- [CVE-2022-50094](https://cve.now/CVE-2022-50094.md): spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (no CVSS, Linux)
- [CVE-2022-50093](https://cve.now/CVE-2022-50093.md): iommu/vt-d: avoid invalid memory access via node\_online(NUMA\_NO\_NODE) (no CVSS, Linux)
- [CVE-2022-50092](https://cve.now/CVE-2022-50092.md): dm thin: fix use-after-free crash in dm\_sm\_register\_threshold\_callback (no CVSS, Linux)
- [CVE-2022-50091](https://cve.now/CVE-2022-50091.md): locking/csd\_lock: Change csdlock\_debug from early\_param to \_\_setup (no CVSS, Linux)
- [CVE-2022-50090](https://cve.now/CVE-2022-50090.md): btrfs: replace BTRFS\_MAX\_EXTENT\_SIZE with fs\_info-\>max\_extent\_size (no CVSS, Linux)
- [CVE-2022-50089](https://cve.now/CVE-2022-50089.md): btrfs: ensure pages are unlocked on cow\_file\_range() failure (no CVSS, Linux)
- [CVE-2022-50088](https://cve.now/CVE-2022-50088.md): mm/damon/reclaim: fix potential memory leak in damon\_reclaim\_init() (no CVSS, Linux)
- [CVE-2022-50087](https://cve.now/CVE-2022-50087.md): firmware: arm\_scpi: Ensure scpi\_info is not assigned if the probe fails (CVSS 7.8, Linux)
- [CVE-2022-50086](https://cve.now/CVE-2022-50086.md): block: don't allow the same type rq\_qos add more than once (no CVSS, Linux)
- [CVE-2022-50085](https://cve.now/CVE-2022-50085.md): dm raid: fix address sanitizer warning in raid\_resume (no CVSS, Linux)
- [CVE-2022-50084](https://cve.now/CVE-2022-50084.md): dm raid: fix address sanitizer warning in raid\_status (no CVSS, Linux)
- [CVE-2022-50082](https://cve.now/CVE-2022-50082.md): ext4: fix warning in ext4\_iomap\_begin as race between bmap and write (no CVSS, Linux)
- [CVE-2022-50080](https://cve.now/CVE-2022-50080.md): tee: add overflow check in register\_shm\_helper() (no CVSS, Linux)
- [CVE-2022-50079](https://cve.now/CVE-2022-50079.md): drm/amd/display: Check correct bounds for stream encoder instances for DCN303 (CVSS 7.0, Linux)
- [CVE-2022-50078](https://cve.now/CVE-2022-50078.md): tracing/eprobes: Do not allow eprobes to use $stack, or % for regs (no CVSS, Linux)
- [CVE-2022-50077](https://cve.now/CVE-2022-50077.md): apparmor: fix reference count leak in aa\_pivotroot() (no CVSS, Linux)
- [CVE-2022-50076](https://cve.now/CVE-2022-50076.md): cifs: Fix memory leak on the deferred close (no CVSS, Linux)
- [CVE-2022-50075](https://cve.now/CVE-2022-50075.md): tracing/eprobes: Have event probes be consistent with kprobes and uprobes (no CVSS, Linux)
- [CVE-2022-50074](https://cve.now/CVE-2022-50074.md): apparmor: Fix memleak in aa\_simple\_write\_to\_buffer() (no CVSS, Linux)
- [CVE-2022-50073](https://cve.now/CVE-2022-50073.md): net: tap: NULL pointer derefence in dev\_parse\_header\_protocol when skb-\>dev is null (no CVSS, Linux)
- [CVE-2022-50072](https://cve.now/CVE-2022-50072.md): NFSv4/pnfs: Fix a use-after-free bug in open (CVSS 7.8, Linux)
- [CVE-2022-50071](https://cve.now/CVE-2022-50071.md): mptcp: move subflow cleanup in mptcp\_destroy\_common() (no CVSS, Linux)
- [CVE-2022-50070](https://cve.now/CVE-2022-50070.md): mptcp: do not queue data on closed subflows (CVSS 7.8, Linux)
- [CVE-2022-50069](https://cve.now/CVE-2022-50069.md): BPF: Fix potential bad pointer dereference in bpf\_sys\_bpf() (no CVSS, Linux)
- [CVE-2022-50068](https://cve.now/CVE-2022-50068.md): drm/ttm: Fix dummy res NULL ptr deref bug (no CVSS, Linux)
- [CVE-2022-50067](https://cve.now/CVE-2022-50067.md): btrfs: unset reloc control if transaction commit fails in prepare\_to\_relocate() (no CVSS, Linux)
- [CVE-2022-50066](https://cve.now/CVE-2022-50066.md): net: atlantic: fix aq\_vec index out of range error (no CVSS, Linux)
- [CVE-2022-50065](https://cve.now/CVE-2022-50065.md): virtio\_net: fix memory leak inside XPD\_TX with mergeable (no CVSS, Linux)
- [CVE-2022-50064](https://cve.now/CVE-2022-50064.md): virtio-blk: Avoid use-after-free on suspend/resume (CVSS 7.8, Linux)
- [CVE-2022-50063](https://cve.now/CVE-2022-50063.md): net: dsa: felix: suppress non-changes to the tagging protocol (no CVSS, Linux)
- [CVE-2022-50062](https://cve.now/CVE-2022-50062.md): net: bgmac: Fix a BUG triggered by wrong bytes\_compl (CVSS 7.5, Linux)
- [CVE-2022-50061](https://cve.now/CVE-2022-50061.md): pinctrl: nomadik: Fix refcount leak in nmk\_pinctrl\_dt\_subnode\_to\_map (no CVSS, Linux)
- [CVE-2022-50060](https://cve.now/CVE-2022-50060.md): octeontx2-af: Fix mcam entry resource leak (no CVSS, Linux)
- [CVE-2022-50059](https://cve.now/CVE-2022-50059.md): ceph: don't leak snap\_rwsem in handle\_cap\_grant (CVSS 7.5, Linux)
- [CVE-2022-50058](https://cve.now/CVE-2022-50058.md): vdpa\_sim\_blk: set number of address spaces and virtqueue groups (no CVSS, Linux)
- [CVE-2022-50057](https://cve.now/CVE-2022-50057.md): fs/ntfs3: Fix NULL deref in ntfs\_update\_mftmirr (no CVSS, Linux)
- [CVE-2022-50056](https://cve.now/CVE-2022-50056.md): fs/ntfs3: Fix missing i\_op in ntfs\_read\_mft (no CVSS, Linux)
- [CVE-2022-50055](https://cve.now/CVE-2022-50055.md): iavf: Fix adminq error handling (no CVSS, Linux)
- [CVE-2022-50054](https://cve.now/CVE-2022-50054.md): iavf: Fix NULL pointer dereference in iavf\_get\_link\_ksettings (no CVSS, Linux)
- [CVE-2022-50053](https://cve.now/CVE-2022-50053.md): iavf: Fix reset error handling (no CVSS, Linux)
- [CVE-2022-50052](https://cve.now/CVE-2022-50052.md): ASoC: Intel: avs: Fix potential buffer overflow by snprintf() (no CVSS, Linux)
- [CVE-2022-50051](https://cve.now/CVE-2022-50051.md): ASoC: SOF: debug: Fix potential buffer overflow by snprintf() (no CVSS, Linux)
- [CVE-2022-50050](https://cve.now/CVE-2022-50050.md): ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() (no CVSS, Linux)
- [CVE-2022-50049](https://cve.now/CVE-2022-50049.md): ASoC: DPCM: Don't pick up BE without substream (no CVSS, Linux)
- [CVE-2022-50048](https://cve.now/CVE-2022-50048.md): netfilter: nf\_tables: possible module reference underflow in error path (CVSS 7.8, Linux)
- [CVE-2022-50047](https://cve.now/CVE-2022-50047.md): net: dsa: mv88e6060: prevent crash on an unused port (no CVSS, Linux)
- [CVE-2022-50046](https://cve.now/CVE-2022-50046.md): net/sunrpc: fix potential memory leaks in rpc\_sysfs\_xprt\_state\_change() (no CVSS, Linux)
- [CVE-2022-50045](https://cve.now/CVE-2022-50045.md): powerpc/pci: Fix get\_phb\_number() locking (no CVSS, Linux)
- [CVE-2022-50044](https://cve.now/CVE-2022-50044.md): net: qrtr: start MHI channel after endpoit creation (no CVSS, Linux)
- [CVE-2022-50043](https://cve.now/CVE-2022-50043.md): net: fix potential refcount leak in ndisc\_router\_discovery() (no CVSS, Linux)
- [CVE-2022-50042](https://cve.now/CVE-2022-50042.md): net: genl: fix error path memory leak in policy dumping (no CVSS, Linux)
- [CVE-2022-50041](https://cve.now/CVE-2022-50041.md): ice: Fix call trace with null VSI during VF reset (no CVSS, Linux)
- [CVE-2022-50040](https://cve.now/CVE-2022-50040.md): net: dsa: sja1105: fix buffer overflow in sja1105\_setup\_devlink\_regions() (no CVSS, Linux)
- [CVE-2022-50039](https://cve.now/CVE-2022-50039.md): stmmac: intel: Add a missing clk\_disable\_unprepare() call in intel\_eth\_pci\_remove() (no CVSS, Linux)
- [CVE-2022-50038](https://cve.now/CVE-2022-50038.md): drm/meson: Fix refcount bugs in meson\_vpu\_has\_available\_connectors() (no CVSS, Linux)
- [CVE-2022-50037](https://cve.now/CVE-2022-50037.md): drm/i915/ttm: don't leak the ccs state (no CVSS, Linux)
- [CVE-2022-50036](https://cve.now/CVE-2022-50036.md): drm/sun4i: dsi: Prevent underflow when computing packet sizes (no CVSS, Linux)
- [CVE-2022-50035](https://cve.now/CVE-2022-50035.md): drm/amdgpu: Fix use-after-free on amdgpu\_bo\_list mutex (CVSS 7.8, Linux)
- [CVE-2022-50034](https://cve.now/CVE-2022-50034.md): usb: cdns3 fix use-after-free at workaround 2 (no CVSS, Linux)
- [CVE-2022-50033](https://cve.now/CVE-2022-50033.md): usb: host: ohci-ppc-of: Fix refcount leak bug (no CVSS, Linux)
- [CVE-2022-50032](https://cve.now/CVE-2022-50032.md): usb: renesas: Fix refcount leak bug (no CVSS, Linux)
- [CVE-2022-50030](https://cve.now/CVE-2022-50030.md): scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (no CVSS, Linux)
- [CVE-2022-50029](https://cve.now/CVE-2022-50029.md): clk: qcom: ipq8074: dont disable gcc\_sleep\_clk\_src (no CVSS, Linux)
- [CVE-2022-50028](https://cve.now/CVE-2022-50028.md): gadgetfs: ep\_io - wait until IRQ finishes (CVSS 7.8, Linux)
- [CVE-2022-50027](https://cve.now/CVE-2022-50027.md): scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (no CVSS, Linux)
- [CVE-2022-50026](https://cve.now/CVE-2022-50026.md): habanalabs/gaudi: fix shift out of bounds (no CVSS, Linux)
- [CVE-2022-50025](https://cve.now/CVE-2022-50025.md): cxl: Fix a memory leak in an error handling path (no CVSS, Linux)
- [CVE-2022-50024](https://cve.now/CVE-2022-50024.md): dmaengine: dw-axi-dmac: do not print NULL LLI during error (no CVSS, Linux)
- [CVE-2022-50023](https://cve.now/CVE-2022-50023.md): dmaengine: dw-axi-dmac: ignore interrupt if no descriptor (no CVSS, Linux)
- [CVE-2022-50022](https://cve.now/CVE-2022-50022.md): drivers:md:fix a potential use-after-free bug (CVSS 7.8, Linux)
- [CVE-2022-50021](https://cve.now/CVE-2022-50021.md): ext4: block range must be validated before use in ext4\_mb\_clear\_bb() (no CVSS, Linux)
- [CVE-2022-50020](https://cve.now/CVE-2022-50020.md): ext4: avoid resizing to a partial cluster size (no CVSS, Linux)
- [CVE-2022-50019](https://cve.now/CVE-2022-50019.md): tty: serial: Fix refcount leak bug in ucc\_uart.c (no CVSS, Linux)
- [CVE-2022-50017](https://cve.now/CVE-2022-50017.md): mips: cavium-octeon: Fix missing of\_node\_put() in octeon2\_usb\_clocks\_start (no CVSS, Linux)
- [CVE-2022-50016](https://cve.now/CVE-2022-50016.md): ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot (no CVSS, Linux)
- [CVE-2022-50015](https://cve.now/CVE-2022-50015.md): ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot (no CVSS, Linux)
- [CVE-2022-50014](https://cve.now/CVE-2022-50014.md): mm/gup: fix FOLL\_FORCE COW security issue and remove FOLL\_COW (CVSS 7.8, Linux)
- [CVE-2022-50013](https://cve.now/CVE-2022-50013.md): f2fs: fix to avoid use f2fs\_bug\_on() in f2fs\_new\_node\_page() (no CVSS, Linux)
- [CVE-2022-50012](https://cve.now/CVE-2022-50012.md): powerpc/64: Init jump labels before parse\_early\_param() (no CVSS, Linux)
- [CVE-2022-50011](https://cve.now/CVE-2022-50011.md): venus: pm\_helpers: Fix warning in OPP during probe (no CVSS, Linux)
- [CVE-2022-50010](https://cve.now/CVE-2022-50010.md): video: fbdev: i740fb: Check the argument of i740\_calc\_vclk() (no CVSS, Linux)
- [CVE-2022-50009](https://cve.now/CVE-2022-50009.md): f2fs: fix null-ptr-deref in f2fs\_get\_dnode\_of\_data (no CVSS, Linux)
- [CVE-2022-50008](https://cve.now/CVE-2022-50008.md): kprobes: don't call disarm\_kprobe() for disabled kprobes (no CVSS, Linux)
- [CVE-2022-50007](https://cve.now/CVE-2022-50007.md): xfrm: fix refcount leak in \_\_xfrm\_policy\_check() (no CVSS, Linux)
- [CVE-2022-50006](https://cve.now/CVE-2022-50006.md): NFSv4.2 fix problems with \_\_nfs42\_ssc\_open (no CVSS, Linux)
- [CVE-2022-50005](https://cve.now/CVE-2022-50005.md): nfc: pn533: Fix use-after-free bugs caused by pn532\_cmd\_timeout (no CVSS, Linux)
- [CVE-2022-50004](https://cve.now/CVE-2022-50004.md): xfrm: policy: fix metadata dst-\>dev xmit null pointer dereference (no CVSS, Linux)
- [CVE-2022-50003](https://cve.now/CVE-2022-50003.md): ice: xsk: prohibit usage of non-balanced queue id (no CVSS, Linux)
- [CVE-2022-50002](https://cve.now/CVE-2022-50002.md): net/mlx5: LAG, fix logic over MLX5\_LAG\_FLAG\_NDEVS\_READY (no CVSS, Linux)
- [CVE-2022-50001](https://cve.now/CVE-2022-50001.md): netfilter: nft\_tproxy: restrict to prerouting hook (no CVSS, Linux)
- [CVE-2022-50000](https://cve.now/CVE-2022-50000.md): netfilter: flowtable: fix stuck flows on cleanup due to pending work (CVSS 7.8, Linux)
- [CVE-2022-49999](https://cve.now/CVE-2022-49999.md): btrfs: fix space cache corruption and potential double allocations (CVSS 7.8, Linux)
- [CVE-2022-49998](https://cve.now/CVE-2022-49998.md): rxrpc: Fix locking in rxrpc's sendmsg (CVSS 7.8, Linux)
- [CVE-2022-49997](https://cve.now/CVE-2022-49997.md): net: lantiq\_xrx200: restore buffer if memory allocation failed (CVSS 7.5, Linux)
- [CVE-2022-49996](https://cve.now/CVE-2022-49996.md): btrfs: fix possible memory leak in btrfs\_get\_dev\_args\_from\_path() (no CVSS, Linux)
- [CVE-2022-49995](https://cve.now/CVE-2022-49995.md): writeback: avoid use-after-free after removing device (CVSS 7.8, Linux)
- [CVE-2022-49994](https://cve.now/CVE-2022-49994.md): bootmem: remove the vmemmap pages from kmemleak in put\_page\_bootmem (no CVSS, Linux)
- [CVE-2022-49993](https://cve.now/CVE-2022-49993.md): loop: Check for overflow while configuring loop (no CVSS, Linux)
- [CVE-2022-49992](https://cve.now/CVE-2022-49992.md): mm/mprotect: only reference swap pfn page if type match (no CVSS, Linux)
- [CVE-2022-49991](https://cve.now/CVE-2022-49991.md): mm/hugetlb: avoid corrupting page-\>mapping in hugetlb\_mcopy\_atomic\_pte (CVSS 7.8, Linux)
- [CVE-2022-49990](https://cve.now/CVE-2022-49990.md): s390: fix double free of GS and RI CBs on fork() failure (CVSS 7.8, Linux)
- [CVE-2022-49989](https://cve.now/CVE-2022-49989.md): xen/privcmd: fix error exit of privcmd\_ioctl\_dm\_op() (no CVSS, Linux)
- [CVE-2022-49987](https://cve.now/CVE-2022-49987.md): md: call \_\_md\_stop\_writes in md\_stop (no CVSS, Linux)
- [CVE-2022-49986](https://cve.now/CVE-2022-49986.md): scsi: storvsc: Remove WQ\_MEM\_RECLAIM from storvsc\_error\_wq (no CVSS, Linux)
- [CVE-2022-49985](https://cve.now/CVE-2022-49985.md): bpf: Don't use tnum\_range on array range checking for poke descriptors (CVSS 7.8, Linux)
- [CVE-2022-49984](https://cve.now/CVE-2022-49984.md): HID: steam: Prevent NULL pointer dereference in steam\_{recv,send}\_report (no CVSS, Linux)
- [CVE-2022-49983](https://cve.now/CVE-2022-49983.md): udmabuf: Set the DMA mask for the udmabuf device (v2) (no CVSS, Linux)
- [CVE-2022-49982](https://cve.now/CVE-2022-49982.md): media: pvrusb2: fix memory leak in pvr\_probe (no CVSS, Linux)
- [CVE-2022-49981](https://cve.now/CVE-2022-49981.md): HID: hidraw: fix memory leak in hidraw\_release() (no CVSS, Linux)
- [CVE-2022-49980](https://cve.now/CVE-2022-49980.md): USB: gadget: Fix use-after-free Read in usb\_udc\_uevent() (no CVSS, Linux)
- [CVE-2022-49979](https://cve.now/CVE-2022-49979.md): net: fix refcount bug in sk\_psock\_get (2) (CVSS 7.8, Linux)
- [CVE-2022-49978](https://cve.now/CVE-2022-49978.md): fbdev: fb\_pm2fb: Avoid potential divide by zero error (no CVSS, Linux)
- [CVE-2022-49977](https://cve.now/CVE-2022-49977.md): ftrace: Fix NULL pointer dereference in is\_ftrace\_trampoline when ftrace is dead (CVSS 7.8, Linux)
- [CVE-2022-49976](https://cve.now/CVE-2022-49976.md): platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS (no CVSS, Linux)
- [CVE-2022-49975](https://cve.now/CVE-2022-49975.md): bpf: Don't redirect packets with invalid pkt\_len (no CVSS, Linux)
- [CVE-2022-49974](https://cve.now/CVE-2022-49974.md): HID: nintendo: fix rumble worker null pointer deref (CVSS 8.8, Linux)
- [CVE-2022-49973](https://cve.now/CVE-2022-49973.md): skmsg: Fix wrong last sg check in sk\_msg\_recvmsg() (no CVSS, Linux)
- [CVE-2022-49972](https://cve.now/CVE-2022-49972.md): xsk: Fix corrupted packets for XDP\_SHARED\_UMEM (CVSS 7.8, Linux)
- [CVE-2022-49971](https://cve.now/CVE-2022-49971.md): drm/amd/pm: Fix a potential gpu\_metrics\_table memory leak (no CVSS, Linux)
- [CVE-2022-49970](https://cve.now/CVE-2022-49970.md): bpf, cgroup: Fix kernel BUG in purge\_effective\_progs (no CVSS, Linux)
- [CVE-2022-49969](https://cve.now/CVE-2022-49969.md): drm/amd/display: clear optc underflow before turn off odm clock (no CVSS, Linux)
- [CVE-2022-49968](https://cve.now/CVE-2022-49968.md): ieee802154/adf7242: defer destroy\_workqueue call (CVSS 8.0, Linux)
- [CVE-2022-49967](https://cve.now/CVE-2022-49967.md): bpf: Fix a data-race around bpf\_jit\_limit. (no CVSS, Linux)
- [CVE-2022-49966](https://cve.now/CVE-2022-49966.md): drm/amd/pm: add missing -\>fini\_microcode interface for Sienna Cichlid (no CVSS, Linux)
- [CVE-2022-49965](https://cve.now/CVE-2022-49965.md): drm/amd/pm: add missing -\>fini\_xxxx interfaces for some SMU13 asics (no CVSS, Linux)
- [CVE-2022-49964](https://cve.now/CVE-2022-49964.md): arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw\_level (no CVSS, Linux)
- [CVE-2022-49963](https://cve.now/CVE-2022-49963.md): drm/i915/ttm: fix CCS handling (CVSS 7.8, Linux)
- [CVE-2022-49962](https://cve.now/CVE-2022-49962.md): xhci: Fix null pointer dereference in remove if xHC has only one roothub (no CVSS, Linux)
- [CVE-2022-49961](https://cve.now/CVE-2022-49961.md): bpf: Do mark\_chain\_precision for ARG\_CONST\_ALLOC\_SIZE\_OR\_ZERO (no CVSS, Linux)
- [CVE-2022-49960](https://cve.now/CVE-2022-49960.md): drm/i915: fix null pointer dereference (no CVSS, Linux)
- [CVE-2022-49959](https://cve.now/CVE-2022-49959.md): openvswitch: fix memory leak at failed datapath creation (no CVSS, Linux)
- [CVE-2022-49958](https://cve.now/CVE-2022-49958.md): net/sched: fix netdevice reference leaks in attach\_default\_qdiscs() (no CVSS, Linux)
- [CVE-2022-49957](https://cve.now/CVE-2022-49957.md): kcm: fix strp\_init() order and cleanup (no CVSS, Linux)
- [CVE-2022-49956](https://cve.now/CVE-2022-49956.md): staging: rtl8712: fix use after free bugs (CVSS 7.0, Linux)
- [CVE-2022-49955](https://cve.now/CVE-2022-49955.md): powerpc/rtas: Fix RTAS MSR\[HV\] handling for Cell (no CVSS, Linux)
- [CVE-2022-49954](https://cve.now/CVE-2022-49954.md): Input: iforce - wake up after clearing IFORCE\_XMIT\_RUNNING flag (no CVSS, Linux)
- [CVE-2022-49953](https://cve.now/CVE-2022-49953.md): iio: light: cm3605: Fix an error handling path in cm3605\_probe() (no CVSS, Linux)
- [CVE-2022-49952](https://cve.now/CVE-2022-49952.md): misc: fastrpc: fix memory corruption on probe (CVSS 7.8, Linux)
- [CVE-2022-49951](https://cve.now/CVE-2022-49951.md): firmware\_loader: Fix use-after-free during unregister (no CVSS, Linux)
- [CVE-2022-49950](https://cve.now/CVE-2022-49950.md): misc: fastrpc: fix memory corruption on open (CVSS 7.8, Linux)
- [CVE-2022-49949](https://cve.now/CVE-2022-49949.md): firmware\_loader: Fix memory leak in firmware upload (no CVSS, Linux)
- [CVE-2022-49948](https://cve.now/CVE-2022-49948.md): vt: Clear selection before changing the font (CVSS 7.8, Linux)
- [CVE-2022-49947](https://cve.now/CVE-2022-49947.md): binder: fix alloc-\>vma\_vm\_mm null-ptr dereference (no CVSS, Linux)
- [CVE-2022-49946](https://cve.now/CVE-2022-49946.md): clk: bcm: rpi: Prevent out-of-bounds access (no CVSS, Linux)
- [CVE-2022-49945](https://cve.now/CVE-2022-49945.md): hwmon: (gpio-fan) Fix array out of bounds access (no CVSS, Linux)
- [CVE-2022-49944](https://cve.now/CVE-2022-49944.md): Revert "usb: typec: ucsi: add a common function ucsi\_unregister\_connectors()" (CVSS 7.8, Linux)
- [CVE-2022-49943](https://cve.now/CVE-2022-49943.md): USB: gadget: Fix obscure lockdep violation for udc\_mutex (no CVSS, Linux)
- [CVE-2022-49942](https://cve.now/CVE-2022-49942.md): wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (no CVSS, Linux)
- [CVE-2022-49940](https://cve.now/CVE-2022-49940.md): tty: n\_gsm: add sanity check for gsm-\>receive in gsm\_receive\_buf() (no CVSS, Linux)
- [CVE-2022-49939](https://cve.now/CVE-2022-49939.md): binder: fix UAF of ref-\>proc caused by race condition (CVSS 7.8, Linux)
- [CVE-2022-49938](https://cve.now/CVE-2022-49938.md): cifs: fix small mempool leak in SMB2\_negotiate() (no CVSS, Linux)
- [CVE-2022-49937](https://cve.now/CVE-2022-49937.md): media: mceusb: Use new usb\_control\_msg\_\*() routines (no CVSS, Linux)
- [CVE-2022-49936](https://cve.now/CVE-2022-49936.md): USB: core: Prevent nested device-reset calls (no CVSS, Linux)
- [CVE-2022-49935](https://cve.now/CVE-2022-49935.md): dma-buf/dma-resv: check if the new fence is really later (CVSS 7.8, Linux)
- [CVE-2022-49934](https://cve.now/CVE-2022-49934.md): wifi: mac80211: Fix UAF in ieee80211\_scan\_rx() (CVSS 8.8, Linux)
- [CVE-2025-1088](https://cve.now/CVE-2025-1088.md): Very long unicode dashboard title or panel name can hang the frontend (CVSS 2.7, Grafana · github.com/grafana/grafana)
- [CVE-2025-38082](https://cve.now/CVE-2025-38082.md): gpio: virtuser: fix potential out-of-bound write (CVSS 7.8, Linux)
- [CVE-2025-38081](https://cve.now/CVE-2025-38081.md): spi-rockchip: Fix register out of bounds access (no CVSS, Linux)
- [CVE-2025-38080](https://cve.now/CVE-2025-38080.md): drm/amd/display: Increase block\_sequence array size (CVSS 7.8, Linux)
- [CVE-2025-38079](https://cve.now/CVE-2025-38079.md): crypto: algif\_hash - fix double free in hash\_accept (CVSS 7.8, Linux)
- [CVE-2025-38078](https://cve.now/CVE-2025-38078.md): ALSA: pcm: Fix race of buffer access at PCM OSS layer (CVSS 7.8, Linux)
- [CVE-2025-38077](https://cve.now/CVE-2025-38077.md): platform/x86: dell-wmi-sysman: Avoid buffer overflow in current\_password\_store() (no CVSS, Linux)
- [CVE-2025-38076](https://cve.now/CVE-2025-38076.md): alloc\_tag: allocate percpu counters for module tags dynamically (no CVSS, Linux)
- [CVE-2025-38075](https://cve.now/CVE-2025-38075.md): scsi: target: iscsi: Fix timeout on deleted connection (CVSS 9.8, Linux)
- [CVE-2025-38074](https://cve.now/CVE-2025-38074.md): vhost-scsi: protect vq-\>log\_used with vq-\>mutex (CVSS 8.8, Linux)
- [CVE-2025-38072](https://cve.now/CVE-2025-38072.md): libnvdimm/labels: Fix divide error in nd\_label\_data\_init() (no CVSS, Linux)
- [CVE-2025-38071](https://cve.now/CVE-2025-38071.md): x86/mm: Check return value from memblock\_phys\_alloc\_range() (no CVSS, Linux)
- [CVE-2025-38070](https://cve.now/CVE-2025-38070.md): ASoC: sma1307: Add NULL check in sma1307\_setting\_loaded() (no CVSS, Linux)
- [CVE-2025-38069](https://cve.now/CVE-2025-38069.md): PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops (no CVSS, Linux)
- [CVE-2025-38068](https://cve.now/CVE-2025-38068.md): crypto: lzo - Fix compression buffer overrun (CVSS 7.8, Linux)
- [CVE-2025-38067](https://cve.now/CVE-2025-38067.md): rseq: Fix segfault on registration when rseq\_cs is non-zero (no CVSS, Linux)
- [CVE-2025-38066](https://cve.now/CVE-2025-38066.md): dm cache: prevent BUG\_ON by blocking retries on failed device resumes (no CVSS, Linux)
- [CVE-2025-38065](https://cve.now/CVE-2025-38065.md): orangefs: Do not truncate file size (CVSS 7.8, Linux)
- [CVE-2025-38064](https://cve.now/CVE-2025-38064.md): virtio: break and reset virtio devices on device\_shutdown() (CVSS 7.8, Linux)
- [CVE-2025-38063](https://cve.now/CVE-2025-38063.md): dm: fix unconditional IO throttle caused by REQ\_PREFLUSH (no CVSS, Linux)
- [CVE-2025-38062](https://cve.now/CVE-2025-38062.md): genirq/msi: Store the IOMMU IOVA directly in msi\_desc instead of iommu\_cookie (CVSS 7.8, Linux)
- [CVE-2025-38061](https://cve.now/CVE-2025-38061.md): net: pktgen: fix access outside of user given buffer in pktgen\_thread\_write() (no CVSS, Linux)
- [CVE-2025-38060](https://cve.now/CVE-2025-38060.md): bpf: copy\_verifier\_state() should copy 'loop\_entry' field (CVSS 7.8, Linux)
- [CVE-2025-38059](https://cve.now/CVE-2025-38059.md): btrfs: avoid NULL pointer dereference if no valid csum tree (no CVSS, Linux)
- [CVE-2025-38058](https://cve.now/CVE-2025-38058.md): \_\_legitimize\_mnt(): check for MNT\_SYNC\_UMOUNT should be under mount\_lock (CVSS 7.8, Linux)
- [CVE-2025-38057](https://cve.now/CVE-2025-38057.md): espintcp: fix skb leaks (CVSS 7.5, Linux)
- [CVE-2025-38056](https://cve.now/CVE-2025-38056.md): ASoC: SOF: Intel: hda: Fix UAF when reloading module (no CVSS, Linux)
- [CVE-2025-38055](https://cve.now/CVE-2025-38055.md): perf/x86/intel: Fix segfault with PEBS-via-PT with sample\_freq (no CVSS, Linux)
- [CVE-2025-38054](https://cve.now/CVE-2025-38054.md): ptp: ocp: Limit signal/freq counts in summary output functions (no CVSS, Linux)
- [CVE-2025-38053](https://cve.now/CVE-2025-38053.md): idpf: fix null-ptr-deref in idpf\_features\_check (no CVSS, Linux)
- [CVE-2025-38052](https://cve.now/CVE-2025-38052.md): net/tipc: fix slab-use-after-free Read in tipc\_aead\_encrypt\_done (CVSS 8.8, Linux)
- [CVE-2025-38051](https://cve.now/CVE-2025-38051.md): smb: client: Fix use-after-free in cifs\_fill\_dirent (CVSS 7.8, Linux)
- [CVE-2025-38050](https://cve.now/CVE-2025-38050.md): mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios (no CVSS, Linux)
- [CVE-2025-38048](https://cve.now/CVE-2025-38048.md): virtio\_ring: Fix data race by tagging event\_triggered as racy for KCSAN (no CVSS, Linux)
- [CVE-2025-38047](https://cve.now/CVE-2025-38047.md): x86/fred: Fix system hang during S4 resume with FRED enabled (no CVSS, Linux)
- [CVE-2025-38045](https://cve.now/CVE-2025-38045.md): wifi: iwlwifi: fix debug actions order (no CVSS, Linux)
- [CVE-2025-38044](https://cve.now/CVE-2025-38044.md): media: cx231xx: set device\_caps for 417 (no CVSS, Linux)
- [CVE-2025-38043](https://cve.now/CVE-2025-38043.md): firmware: arm\_ffa: Set dma\_mask for ffa devices (no CVSS, Linux)
- [CVE-2025-38042](https://cve.now/CVE-2025-38042.md): dmaengine: ti: k3-udma-glue: Drop skip\_fdq argument from k3\_udma\_glue\_reset\_rx\_chn (no CVSS, Linux)
- [CVE-2025-38041](https://cve.now/CVE-2025-38041.md): clk: sunxi-ng: h616: Reparent GPU clock during frequency changes (no CVSS, Linux)
- [CVE-2025-38040](https://cve.now/CVE-2025-38040.md): serial: mctrl\_gpio: split disable\_ms into sync and no\_sync APIs (no CVSS, Linux)
- [CVE-2025-38039](https://cve.now/CVE-2025-38039.md): net/mlx5e: Avoid WARN\_ON when configuring MQPRIO with HTB offload enabled (no CVSS, Linux)
- [CVE-2025-38038](https://cve.now/CVE-2025-38038.md): cpufreq: amd-pstate: Remove unnecessary driver\_lock in set\_boost (no CVSS, Linux)
- [CVE-2025-38037](https://cve.now/CVE-2025-38037.md): vxlan: Annotate FDB data races (no CVSS, Linux)
- [CVE-2025-38036](https://cve.now/CVE-2025-38036.md): drm/xe/vf: Perform early GT MMIO initialization to read GMDID (no CVSS, Linux)
- [CVE-2025-38035](https://cve.now/CVE-2025-38035.md): nvmet-tcp: don't restore null sk\_state\_change (CVSS 7.5, Linux)
- [CVE-2025-38034](https://cve.now/CVE-2025-38034.md): btrfs: correct the order of prelim\_ref arguments in btrfs\_\_prelim\_ref (no CVSS, Linux)
- [CVE-2025-38033](https://cve.now/CVE-2025-38033.md): x86/Kconfig: make CFI\_AUTO\_DEFAULT depend on !RUST or Rust \>= 1.88 (no CVSS, Linux)
- [CVE-2025-38032](https://cve.now/CVE-2025-38032.md): mr: consolidate the ipmr\_can\_free\_table() checks. (no CVSS, Linux)
- [CVE-2025-38031](https://cve.now/CVE-2025-38031.md): padata: do not leak refcount in reorder\_work (no CVSS, Linux)
- [CVE-2025-38029](https://cve.now/CVE-2025-38029.md): kasan: avoid sleepable page allocation from atomic context (no CVSS, Linux)
- [CVE-2025-38028](https://cve.now/CVE-2025-38028.md): NFS/localio: Fix a race in nfs\_local\_open\_fh() (CVSS 7.8, Linux)
- [CVE-2025-38027](https://cve.now/CVE-2025-38027.md): regulator: max20086: fix invalid memory access (no CVSS, Linux)
- [CVE-2025-38025](https://cve.now/CVE-2025-38025.md): iio: adc: ad7606: check for NULL before calling sw\_mode\_config() (no CVSS, Linux)
- [CVE-2025-38024](https://cve.now/CVE-2025-38024.md): RDMA/rxe: Fix slab-use-after-free Read in rxe\_queue\_cleanup bug (CVSS 7.8, Linux)
- [CVE-2025-38023](https://cve.now/CVE-2025-38023.md): nfs: handle failure of nfs\_get\_lock\_context in unlock path (no CVSS, Linux)
- [CVE-2025-38022](https://cve.now/CVE-2025-38022.md): RDMA/core: Fix "KASAN: slab-use-after-free Read in ib\_register\_device" problem (CVSS 7.8, Linux)
- [CVE-2025-38021](https://cve.now/CVE-2025-38021.md): drm/amd/display: Fix null check of pipe\_ctx-\>plane\_state for update\_dchubp\_dpp (no CVSS, Linux)
- [CVE-2025-38020](https://cve.now/CVE-2025-38020.md): net/mlx5e: Disable MACsec offload for uplink representor profile (no CVSS, Linux)
- [CVE-2025-38019](https://cve.now/CVE-2025-38019.md): mlxsw: spectrum\_router: Fix use-after-free when deleting GRE net devices (no CVSS, Linux)
- [CVE-2025-38018](https://cve.now/CVE-2025-38018.md): net/tls: fix kernel panic when alloc\_page failed (CVSS 7.5, Linux)
- [CVE-2025-38017](https://cve.now/CVE-2025-38017.md): fs/eventpoll: fix endless busy loop after timeout has expired (no CVSS, Linux)
- [CVE-2025-38016](https://cve.now/CVE-2025-38016.md): HID: bpf: abort dispatch if device destroyed (CVSS 8.8, Linux)
- [CVE-2025-38015](https://cve.now/CVE-2025-38015.md): dmaengine: idxd: fix memory leak in error handling path of idxd\_alloc (no CVSS, Linux)
- [CVE-2025-38014](https://cve.now/CVE-2025-38014.md): dmaengine: idxd: Refactor remove call with idxd\_cleanup() helper (no CVSS, Linux)
- [CVE-2025-38013](https://cve.now/CVE-2025-38013.md): wifi: mac80211: Set n\_channels after allocating struct cfg80211\_scan\_request (no CVSS, Linux)
- [CVE-2025-38012](https://cve.now/CVE-2025-38012.md): sched\_ext: bpf\_iter\_scx\_dsq\_new() should always initialize iterator (CVSS 7.8, Linux)
- [CVE-2025-38011](https://cve.now/CVE-2025-38011.md): drm/amdgpu: csa unmap use uninterruptible lock (no CVSS, Linux)
- [CVE-2025-38010](https://cve.now/CVE-2025-38010.md): phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (no CVSS, Linux)
- [CVE-2025-38009](https://cve.now/CVE-2025-38009.md): wifi: mt76: disable napi on driver removal (no CVSS, Linux)
- [CVE-2025-38008](https://cve.now/CVE-2025-38008.md): mm/page\_alloc: fix race condition in unaccepted memory handling (no CVSS, Linux)
- [CVE-2025-38007](https://cve.now/CVE-2025-38007.md): HID: uclogic: Add NULL check in uclogic\_input\_configured() (no CVSS, Linux)
- [CVE-2025-38006](https://cve.now/CVE-2025-38006.md): net: mctp: Don't access ifa\_index when missing (no CVSS, Linux)
- [CVE-2025-38005](https://cve.now/CVE-2025-38005.md): dmaengine: ti: k3-udma: Add missing locking (CVSS 7.8, Linux)
- [CVE-2025-23999](https://cve.now/CVE-2025-23999.md): WordPress Breeze plugin \<= 2.2.13 - Broken Access Control vulnerability (CVSS 4.3, Cloudways Breeze)
- [CVE-2025-5237](https://cve.now/CVE-2025-5237.md): Target Video Easy Publish \<= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter (CVSS 6.4, nebojsadabic Target Video Easy Publish)
- [CVE-2025-6086](https://cve.now/CVE-2025-6086.md): CSV Me \<= 2.0 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2, scottyla CSV Me)
- [CVE-2025-5981](https://cve.now/CVE-2025-5981.md): Arbitrary File write in OSV-SCALIBR (CVSS 5.7, Google osv-scalibr · github.com/google/osv-scalibr)
- [CVE-2025-1562](https://cve.now/CVE-2025-1562.md): Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit \<= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation (CVSS 9.8, amans2k FunnelKit Automations – Email Marketing Automation…)
- [CVE-2025-4955](https://cve.now/CVE-2025-4955.md): tarteaucitron.io \< 1.9.5 - Contributor+ Stored XSS (CVSS 4.7, tarteaucitron.io)
- [CVE-2025-51381](https://cve.now/CVE-2025-51381.md): An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. (CVSS 9.8, KAON KCM3100)
- [CVE-2025-50202](https://cve.now/CVE-2025-50202.md): Lychee Path Traversal Vulnerability (CVSS 7.5, LycheeOrg Lychee)
- [CVE-2025-4413](https://cve.now/CVE-2025-4413.md): Pixabay Images \<= 3.4 - Authenticated (Author+) Arbitrary File Upload (CVSS 8.8, byrev Pixabay Images)
- [CVE-2025-23252](https://cve.now/CVE-2025-23252.md): The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. (CVSS 4.5, NVIDIA NVDebug tool)
- [CVE-2025-26198](https://cve.now/CVE-2025-26198.md): CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. (CVSS 9.8)
- [CVE-2025-26199](https://cve.now/CVE-2025-26199.md): CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. (CVSS 9.8)
- [CVE-2025-29646](https://cve.now/CVE-2025-29646.md): An issue in upf in open5gs 2.7.2 and earlier allows a remote attacker to cause a Denial of Service via a crafted PFCP SessionEstablishmentRe (CVSS 7.1)
- [CVE-2025-44951](https://cve.now/CVE-2025-44951.md): A missing length check in \`ogs\_pfcp\_dev\_add\` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a loc (CVSS 7.1)
- [CVE-2025-44952](https://cve.now/CVE-2025-44952.md): A missing length check in \`ogs\_pfcp\_subnet\_add\` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a (CVSS 7.8)
- [CVE-2025-45661](https://cve.now/CVE-2025-45661.md): A cross-site scripting (XSS) vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a (CVSS 5.9)
- [CVE-2025-45784](https://cve.now/CVE-2025-45784.md): D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS\_USER\_PASSWORD, which may expose sensitive us (CVSS 9.8)
- [CVE-2025-45786](https://cve.now/CVE-2025-45786.md): Real Estate Management 1.0 is vulnerable to Cross Site Scripting (XSS) in /store/index.php. (CVSS 8.1)
- [CVE-2025-46109](https://cve.now/CVE-2025-46109.md): SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET requ (CVSS 8.8)
- [CVE-2025-46157](https://cve.now/CVE-2025-46157.md): An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave reques (CVSS 9.9)
- [CVE-2025-49015](https://cve.now/CVE-2025-49015.md): The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. (CVSS 4.9, CouchbaseNetClient)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.