CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
KernelLinuxio_uring: fix multishot accept request leaksNo scoreKernelLinuxInput: iforce - invert valid length check when fetching device IDsNo scoreKernelLinuxscsi: zfcp: Fix double free of FSF request when qdio send failsNo scoreKernelLinuxmisc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()No scoreKernelLinuxmmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()No scoreKernelLinuxblk-cgroup: properly pin the parent in blkcg_css_onlineNo scoreKernelLinuxx86/sgx: Add overflow check in sgx_validate_offset_length()No scoreKernelLinuxperf/x86/amd/uncore: Fix memory leak for events arrayNo scoreKernelLinuxx86/fpu: Drop fpregs lock before inheriting FPU permissionsNo scoreKernelLinuxperf: Improve missing SIGTRAP checkingNo scoreKernelLinuxnet: use struct_group to copy ip/ipv6 header addressesNo scoreKernelLinuxperf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttlingNo scoreKernelLinuxscsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()No scoreKernelLinuxkprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace caseNo scoreKernelLinuxarm64/mm: fix incorrect file_map_count for non-leaf pmd/pudNo scoreKernelLinuxInput: i8042 - fix leaking of platform device on module removalNo scoreKernelLinuxmacvlan: enforce a consistent minimal mtuNo scoreKernelLinuxtcp: cdg: allow tcp_cdg_release() to be called multiple timesNo scoreKernelLinuxKVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()No scoreKernelLinuxkcm: avoid potential race in kcm_tx_workNo scoreKernelLinuxdrm/amd/display: Fix optc2_configure warning on dcn314No scoreKernelLinuxALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()No scoreKernelLinuxdm ioctl: fix misbehavior if list_versions races with module loadingNo scoreKernelLinuxceph: avoid putting the realm twice when decoding snaps failsNo scoreKernelLinuxgfs2: Check sb_bsize_shift after reading superblockNo scoreKernelLinux9p: trans_fd/p9_conn_cancel: drop client lock earlierNo scoreKernelLinux9p/trans_fd: always use O_NONBLOCK read/writeNo scoreKernelLinuxnetlink: Bounds-check struct nlmsgerr creationNo scoreKernelLinuxnet/9p: use a dedicated spinlock for trans_fdNo scoreKernelLinuxbpf: Prevent bpf program recursion for raw tracepoint probesNo scoreKernelLinuxntfs: fix use-after-free in ntfs_attr_find()No scoreKernelLinuxntfs: fix out-of-bounds read in ntfs_attr_find()No scoreKernelLinuxntfs: check overflow when iterating ATTR_RECORDsNo score- hasura graphql engineHasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for...8.8 High
- openharmonyPIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.8.3 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at ...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword...7.5 High
- Show moreLoading…