Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-49180LSM: general protection fault in legacy_parse_param
- CVE-2022-49179block, bfq: don't move oom_bfqq
- CVE-2022-49178memstick/mspro_block: fix handling of read-only devices
- CVE-2022-49177hwrng: cavium - fix NULL but dereferenced coccicheck error
- CVE-2022-49176bfq: fix use-after-free in bfq_dispatch_request
- CVE-2022-49175PM: core: keep irq flags in device_pm_check_callbacks()
- CVE-2022-49174ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
- CVE-2022-49173spi: fsi: Implement a timeout for polling status
- CVE-2022-49172parisc: Fix non-access data TLB cache flush faults
- CVE-2022-49171ext4: don't BUG if someone dirty pages without asking ext4 first
- CVE-2022-49170f2fs: fix to do sanity check on curseg->alloc_type
- CVE-2022-49169f2fs: use spin_lock to avoid hang
- CVE-2022-49168btrfs: do not clean up repair bio if submit fails
- CVE-2022-49167btrfs: do not double complete bio on errors during compressed reads
- CVE-2022-49166ntfs: add sanity check on allocation size
- CVE-2022-49165media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
- CVE-2022-49164powerpc/tm: Fix more userspace r13 corruption
- CVE-2022-49163media: imx-jpeg: fix a bug of accessing array out of bounds
- CVE-2022-49162video: fbdev: sm712fb: Fix crash in smtcfb_write()
- CVE-2022-49161ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe
- CVE-2022-49160scsi: qla2xxx: Fix crash during module load unload test
- CVE-2022-49159scsi: qla2xxx: Implement ref count for SRB
- CVE-2022-49158scsi: qla2xxx: Fix warning message due to adisc being flushed
- CVE-2022-49157scsi: qla2xxx: Fix premature hw access after PCI error
- CVE-2022-49156scsi: qla2xxx: Fix scheduling while atomic
- CVE-2022-49155scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- CVE-2022-49154KVM: SVM: fix panic on out-of-bounds guest IRQ
- CVE-2022-49153wireguard: socket: free skb in send6 when ipv6 is disabled
- CVE-2022-49152XArray: Fix xas_create_range() when multi-order entry present
- CVE-2022-49151can: mcba_usb: properly check endpoint type