{"kind": "product", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "name": "linux-azure-fde-5.15", "product": "linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS", "items": [{"id": "CVE-2022-48993", "noindex": false, "published": "2024-10-21T20:15:00Z", "modified": "2026-10-28T08:20:10.795405572Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48993", "title": "UBUNTU-CVE-2022-48993", "description": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "references": ["https://ubuntu.com/security/CVE-2022-48993", "https://www.cve.org/CVERecord?id=CVE-2022-48993", "https://git.kernel.org/linus/a6a00d7e8ffd78d1cdb7a43f1278f081038c638f"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49030", "noindex": false, "published": "2024-10-21T20:06:34.571Z", "modified": "2026-08-05T08:53:34.621Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00276, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49030", "title": "libbpf: Handle size overflow for ringbuf mmap", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibbpf: Handle size overflow for ringbuf mmap\n\nThe maximum size of ringbuf is 2GB on x86-64 host, so 2 * max_entries\nwill overflow u32 when mapping producer page and data pages. Only\ncasting max_entries to size_t is not enough, because for 32-bits\napplication on 64-bits kernel the size of read-only mmap region\nalso could overflow size_t.\n\nSo fixing it by casting the size of read-only mmap region into a __u64\nand checking whether or not there will be overflow during mmap.", "references": ["https://git.kernel.org/stable/c/8a549ab6724520aa3c07f47e0eba820293551490", "https://git.kernel.org/stable/c/0140e079a42064680394fff1199a7b5483688dec", "https://git.kernel.org/stable/c/535a25ab4f9a45f74ba38ab71de95e97474922ed"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49024", "noindex": false, "published": "2024-10-21T20:06:30.544Z", "modified": "2026-05-11T18:51:44.074Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00237, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49024", "title": "can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods\n\nIn m_can_pci_remove() and error handling path of m_can_pci_probe(),\nm_can_class_free_dev() should be called to free resource allocated by\nm_can_class_allocate_dev(), otherwise there will be memleak.", "references": ["https://git.kernel.org/stable/c/ea8dc27bb044e19868155e500ce397007be98656", "https://git.kernel.org/stable/c/0bbb88651ef6b7fbb1bf75ec7ba69add632e834b", "https://git.kernel.org/stable/c/1eca1d4cc21b6d0fc5f9a390339804c0afce9439"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49022", "noindex": false, "published": "2024-10-21T20:06:29.239Z", "modified": "2026-08-05T08:53:29.205Z", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "severity": "high", "epss": 0.00343, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49022", "title": "wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac8021: fix possible oob access in ieee80211_get_rate_duration\n\nFix possible out-of-bound access in ieee80211_get_rate_duration routine\nas reported by the following UBSAN report:\n\nUBSAN: array-index-out-of-bounds in net/mac80211/airtime.c:455:47\nindex 15 is out of range for type 'u16 [12]'\nCPU: 2 PID: 217 Comm: kworker/u32:10 Not tainted 6.1.0-060100rc3-generic\nHardware name: Acer Aspire TC-281/Aspire TC-281, BIOS R01-A2 07/18/2017\nWorkqueue: mt76 mt76u_tx_status_data [mt76_usb]\nCall Trace:\n <TASK>\n show_stack+0x4e/0x61\n dump_stack_lvl+0x4a/0x6f\n dump_stack+0x10/0x18\n", "references": ["https://git.kernel.org/stable/c/0184ede0ec61b9cd075babfaa45081b1bf322234", "https://git.kernel.org/stable/c/59b54f0563b6546c94bdb6823d3b382c75407019", "https://git.kernel.org/stable/c/f0fcad4c7201ecfaa17357f4ce0c50b4708df22d"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49017", "noindex": false, "published": "2024-10-21T20:06:25.971Z", "modified": "2026-08-05T08:53:28.139Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00642, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49017", "title": "tipc: re-fetch skb cb after tipc_msg_validate", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: re-fetch skb cb after tipc_msg_validate\n\nAs the call trace shows, the original skb was freed in tipc_msg_validate(),\nand dereferencing the old skb cb would cause an use-after-free crash.\n\n  BUG: KASAN: use-after-free in tipc_crypto_rcv_complete+0x1835/0x2240 [tipc]\n  Call Trace:\n   <IRQ>\n   tipc_crypto_rcv_complete+0x1835/0x2240 [tipc]\n   tipc_crypto_rcv+0xd32/0x1ec0 [tipc]\n   tipc_rcv+0x744/0x1150 [tipc]\n  ...\n  Allocated by task 47078:\n   kmem_cache_alloc_node+0x158/0x4d0\n   __alloc_skb+0x1c1/0x270\n   tipc_buf_acquire+0x1e/0xe0 [tipc]\n   tipc_msg_create+0x33/0x1c0 [t", "references": ["https://git.kernel.org/stable/c/a1ba595e35aa3afbe417ff0af353afb9f65559c0", "https://git.kernel.org/stable/c/1daec0815655e110c6f206c5e777a4af8168ff58", "https://git.kernel.org/stable/c/e128190adb2edfd5042105b5d1ed4553f295f5ef"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49016", "noindex": false, "published": "2024-10-21T20:06:25.294Z", "modified": "2026-05-11T18:51:34.730Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00245, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49016", "title": "net: mdiobus: fix unbalanced node reference count", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mdiobus: fix unbalanced node reference count\n\nI got the following report while doing device(mscc-miim) load test\nwith CONFIG_OF_UNITTEST and CONFIG_OF_DYNAMIC enabled:\n\n  OF: ERROR: memory leak, expected refcount 1 instead of 2,\n  of_node_get()/of_node_put() unbalanced - destroy cset entry:\n  attach overlay node /spi/soc@0/mdio@7107009c/ethernet-phy@0\n\nIf the 'fwnode' is not an acpi node, the refcount is get in\nfwnode_mdiobus_phy_device_register(), but it has never been\nput when the device is freed in the normal path. So call\nfwnode_handle_put() in phy_device_release() ", "references": ["https://git.kernel.org/stable/c/543d917f691ab06885ee779c862065899eaa4251", "https://git.kernel.org/stable/c/2708b357440427d6a9fee667eb7b8307f4625adc", "https://git.kernel.org/stable/c/cdde1560118f82498fc9e9a7c1ef7f0ef7755891"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49005", "noindex": false, "published": "2024-10-21T20:06:18.143Z", "modified": "2026-05-23T15:21:23.972Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00236, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49005", "title": "ASoC: ops: Fix bounds check for _sx controls", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: ops: Fix bounds check for _sx controls\n\nFor _sx controls the semantics of the max field is not the usual one, max\nis the number of steps rather than the maximum value. This means that our\ncheck in snd_soc_put_volsw_sx() needs to just check against the maximum\nvalue.", "references": ["https://git.kernel.org/stable/c/e46adadf19248d59af3aa6bc52e09115bf479bf7", "https://git.kernel.org/stable/c/4a95a49f26308782b4056401989ecd7768fda8fa", "https://git.kernel.org/stable/c/46bab25cc0230df60d1c02b651cc5640a14b08df"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49004", "noindex": false, "published": "2024-10-21T20:06:17.410Z", "modified": "2026-05-11T18:51:20.868Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00245, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49004", "title": "riscv: Sync efi page table's kernel mappings before switching", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: Sync efi page table's kernel mappings before switching\n\nThe EFI page table is initially created as a copy of the kernel page table.\nWith VMAP_STACK enabled, kernel stacks are allocated in the vmalloc area:\nif the stack is allocated in a new PGD (one that was not present at the\nmoment of the efi page table creation or not synced in a previous vmalloc\nfault), the kernel will take a trap when switching to the efi page table\nwhen the vmalloc kernel stack is accessed, resulting in a kernel panic.\n\nFix that by updating the efi kernel mappings before switching to the efi\npag", "references": ["https://git.kernel.org/stable/c/fa7a7d185ef380546b4b1fed6f84f31dbae8cec7", "https://git.kernel.org/stable/c/96f479383d92944406d4b3f2bc03c2f640def9f1", "https://git.kernel.org/stable/c/3f105a742725a1b78766a55169f1d827732e62b8"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49003", "noindex": false, "published": "2024-10-21T20:06:16.737Z", "modified": "2026-08-05T08:53:24.890Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.00618, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49003", "title": "nvme: fix SRCU protection of nvme_ns_head list", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: fix SRCU protection of nvme_ns_head list\n\nWalking the nvme_ns_head siblings list is protected by the head's srcu\nin nvme_ns_head_submit_bio() but not nvme_mpath_revalidate_paths().\nRemoving namespaces from the list also fails to synchronize the srcu.\nConcurrent scan work can therefore cause use-after-frees.\n\nHold the head's srcu lock in nvme_mpath_revalidate_paths() and\nsynchronize with the srcu, not the global RCU, in nvme_ns_remove().\n\nObserved the following panic when making NVMe/RDMA connections\nwith native multipath on the Rocky Linux 8.6 kernel\n(it seems the upst", "references": ["https://git.kernel.org/stable/c/787d81d4eb150e443e5d1276c6e8f03cfecc2302", "https://git.kernel.org/stable/c/5b566d09ab1b975566a53f9c5466ee260d087582", "https://git.kernel.org/stable/c/899d2a05dc14733cfba6224083c6b0dd5a738590"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-49001", "noindex": false, "published": "2024-10-21T20:06:15.443Z", "modified": "2026-08-05T08:53:23.800Z", "cvss": 7, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.0019, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-49001", "title": "riscv: fix race when vmap stack overflow", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: fix race when vmap stack overflow\n\nCurrently, when detecting vmap stack overflow, riscv firstly switches\nto the so called shadow stack, then use this shadow stack to call the\nget_overflow_stack() to get the overflow stack. However, there's\na race here if two or more harts use the same shadow stack at the same\ntime.\n\nTo solve this race, we introduce spin_shadow_stack atomic var, which\nwill be swap between its own address and 0 in atomic way, when the\nvar is set, it means the shadow_stack is being used; when the var\nis cleared, it means the shadow_stack isn't being used", "references": ["https://git.kernel.org/stable/c/ac00301adb19df54f2eae1efc4bad7447c0156ce", "https://git.kernel.org/stable/c/879fabc5a95401d9bce357e4b1d24ae4a360a81f", "https://git.kernel.org/stable/c/7e1864332fbc1b993659eab7974da9fe8bf8c128"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48995", "noindex": false, "published": "2024-10-21T20:06:11.482Z", "modified": "2026-05-11T18:51:10.251Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48995", "title": "Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: raydium_ts_i2c - fix memory leak in raydium_i2c_send()\n\nThere is a kmemleak when test the raydium_i2c_ts with bpf mock device:\n\n  unreferenced object 0xffff88812d3675a0 (size 8):\n    comm \"python3\", pid 349, jiffies 4294741067 (age 95.695s)\n    hex dump (first 8 bytes):\n      11 0e 10 c0 01 00 04 00                          ........\n    backtrace:\n      [<0000000068427125>] __kmalloc+0x46/0x1b0\n      [<0000000090180f91>] raydium_i2c_send+0xd4/0x2bf [raydium_i2c_ts]\n      [<000000006e631aee>] raydium_i2c_initialize.cold+0xbc/0x3e4 [raydium_i2c_ts]\n      [<00000000dc6fc", "references": ["https://git.kernel.org/stable/c/a82869ac52f3d9db4b2cf8fd41edc2dee7a75a61", "https://git.kernel.org/stable/c/53b9b1201e34ccc895971218559123625c56fbcd", "https://git.kernel.org/stable/c/097c1c7a28e3da8f2811ba532be6e81faab15aab"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48987", "noindex": false, "published": "2024-10-21T20:06:03.328Z", "modified": "2026-05-11T18:51:00.738Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00249, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48987", "title": "media: v4l2-dv-timings.c: fix too strict blanking sanity checks", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-dv-timings.c: fix too strict blanking sanity checks\n\nSanity checks were added to verify the v4l2_bt_timings blanking fields\nin order to avoid integer overflows when userspace passes weird values.\n\nBut that assumed that userspace would correctly fill in the front porch,\nbackporch and sync values, but sometimes all you know is the total\nblanking, which is then assigned to just one of these fields.\n\nAnd that can fail with these checks.\n\nSo instead set a maximum for the total horizontal and vertical\nblanking and check that each field remains below that.\n\nThat is stil", "references": ["https://git.kernel.org/stable/c/0d73b49c4037199472b29574ae21c21aef493971", "https://git.kernel.org/stable/c/a2b56627c0d13009e02f6f2c0206c0451ed19a0e", "https://git.kernel.org/stable/c/2572ab14b73aa45b6ae7e4c089ccf119fed5cf89"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48985", "noindex": false, "published": "2024-10-21T20:06:01.802Z", "modified": "2026-08-05T08:53:15.213Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.0059, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48985", "title": "net: mana: Fix race on per-CQ variable napi work_done", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Fix race on per-CQ variable napi work_done\n\nAfter calling napi_complete_done(), the NAPIF_STATE_SCHED bit may be\ncleared, and another CPU can start napi thread and access per-CQ variable,\ncq->work_done. If the other thread (for example, from busy_poll) sets\nit to a value >= budget, this thread will continue to run when it should\nstop, and cause memory corruption and panic.\n\nTo fix this issue, save the per-CQ work_done variable in a local variable\nbefore napi_complete_done(), so it won't be corrupted by a possible\nconcurrent thread after napi_complete_done().\n\nAlso", "references": ["https://git.kernel.org/stable/c/fe50a9bbeb1f042e756c5cfa7708112c944368de", "https://git.kernel.org/stable/c/6740d8572ccd1bca50d8a1ca2bedc333f50ed5f3", "https://git.kernel.org/stable/c/18010ff776fa42340efc428b3ea6d19b3e7c7b21"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48983", "noindex": false, "published": "2024-10-21T20:06:00.376Z", "modified": "2026-05-11T18:50:56.049Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00262, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48983", "title": "io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: Fix a null-ptr-deref in io_tctx_exit_cb()\n\nSyzkaller reports a NULL deref bug as follows:\n\n BUG: KASAN: null-ptr-deref in io_tctx_exit_cb+0x53/0xd3\n Read of size 4 at addr 0000000000000138 by task file1/1955\n\n CPU: 1 PID: 1955 Comm: file1 Not tainted 6.1.0-rc7-00103-gef4d3ea40565 #75\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 04/01/2014\n Call Trace:\n  <TASK>\n  dump_stack_lvl+0xcd/0x134\n  ? io_tctx_exit_cb+0x53/0xd3\n  kasan_report+0xbb/0x1f0\n  ? io_tctx_exit_cb+0x53/0xd3\n  kasan_check_range+0x140/0x190\n  io_tctx_exit_cb+0x53/0xd3\n  tas", "references": ["https://git.kernel.org/stable/c/f895511de9d27fff71dad2c234ad53b4afd2b06c", "https://git.kernel.org/stable/c/d91edca1943453aaaba4f380f6f364346222e5cf", "https://git.kernel.org/stable/c/998b30c3948e4d0b1097e639918c5cff332acac5"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48980", "noindex": false, "published": "2024-10-21T20:05:58.373Z", "modified": "2026-05-11T18:50:52.593Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00244, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48980", "title": "net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()\n\nThe SJA1105 family has 45 L2 policing table entries\n(SJA1105_MAX_L2_POLICING_COUNT) and SJA1110 has 110\n(SJA1110_MAX_L2_POLICING_COUNT). Keeping the table structure but\naccounting for the difference in port count (5 in SJA1105 vs 10 in\nSJA1110) does not fully explain the difference. Rather, the SJA1110 also\nhas L2 ingress policers for multicast traffic. If a packet is classified\nas multicast, it will be processed by the policer index 99 + SRCPORT.\n\nThe sja1105_init_l2_policing() function initializes", "references": ["https://git.kernel.org/stable/c/5e88c6f4aaa70c542e59e5a9d2244bcc99cd245d", "https://git.kernel.org/stable/c/147f3e3d84054117ae6b9bf317ec4fda9f991192", "https://git.kernel.org/stable/c/f8bac7f9fdb0017b32157957ffffd490f95faa07"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48977", "noindex": false, "published": "2024-10-21T20:05:56.389Z", "modified": "2026-05-23T15:21:15.559Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00245, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48977", "title": "can: af_can: fix NULL pointer dereference in can_rcv_filter", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: af_can: fix NULL pointer dereference in can_rcv_filter\n\nAnalogue to commit 8aa59e355949 (\"can: af_can: fix NULL pointer\ndereference in can_rx_register()\") we need to check for a missing\ninitialization of ml_priv in the receive path of CAN frames.\n\nSince commit 4e096a18867a (\"net: introduce CAN specific pointer in the\nstruct net_device\") the check for dev->type to be ARPHRD_CAN is not\nsufficient anymore since bonding or tun netdevices claim to be CAN\ndevices but do not initialize ml_priv accordingly.", "references": ["https://git.kernel.org/stable/c/3982652957e8d79ac32efcb725450580650a8644", "https://git.kernel.org/stable/c/c42221efb1159d6a3c89e96685ee38acdce86b6f", "https://git.kernel.org/stable/c/c142cba37de29f740a3852f01f59876af8ae462a"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48968", "noindex": false, "published": "2024-10-21T20:05:50.402Z", "modified": "2026-05-11T18:50:38.690Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48968", "title": "octeontx2-pf: Fix potential memory leak in otx2_init_tc()", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix potential memory leak in otx2_init_tc()\n\nIn otx2_init_tc(), if rhashtable_init() failed, it does not free\ntc->tc_entries_bitmap which is allocated in otx2_tc_alloc_ent_bitmap().", "references": ["https://git.kernel.org/stable/c/eefd8953a74822cb72006632b9ee9dd95f92c146", "https://git.kernel.org/stable/c/db5ec358cf4ef0ab382ee733d05f018e8bef9462", "https://git.kernel.org/stable/c/fbf33f5ac76f2cdb47ad9763f620026d5cfa57ce"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48965", "noindex": false, "published": "2024-10-21T20:05:48.483Z", "modified": "2026-05-11T18:50:35.207Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00231, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48965", "title": "gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio/rockchip: fix refcount leak in rockchip_gpiolib_register()\n\nThe node returned by of_get_parent() with refcount incremented,\nof_node_put() needs be called when finish using it. So add it in the\nend of of_pinctrl_get().", "references": ["https://git.kernel.org/stable/c/5cb8f1a784fd6115be58282fe15105572319d8be", "https://git.kernel.org/stable/c/033c79b7ee8a7bf1c1a13ac3addc91184425cbae", "https://git.kernel.org/stable/c/63ff545af73f759d1bd04198af8ed8577fb739fc"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48959", "noindex": false, "published": "2024-10-21T20:05:44.447Z", "modified": "2026-05-11T18:50:28.230Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48959", "title": "net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()\n\nWhen dsa_devlink_region_create failed in sja1105_setup_devlink_regions(),\npriv->regions is not released.", "references": ["https://git.kernel.org/stable/c/4be43e46c3f945fc7dd9e23c73a7a66927a3b814", "https://git.kernel.org/stable/c/f3b5dda26cd0535aac09ed09c5d83f19b979ec9f", "https://git.kernel.org/stable/c/e5e59629654b8826f0167dae480d0e3fa0f8f038"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}, {"id": "CVE-2022-48957", "noindex": false, "published": "2024-10-21T20:05:43.107Z", "modified": "2026-05-11T18:50:25.790Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-48957", "title": "dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()\n\nThe cmd_buff needs to be freed when error happened in\ndpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove().", "references": ["https://git.kernel.org/stable/c/54d830e24247fa8361b016dd2069362866f45cb6", "https://git.kernel.org/stable/c/785ee7a82297e1512d9061aae91699212ed65796", "https://git.kernel.org/stable/c/4fad22a1281c500f15b172c9d261eff347ca634b"], "fixes": ["5.15.0-1034.41~20.04.1.2"], "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}]}], "total": 141, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 8, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "linux-azure-fde-5.15", "path": "vulns/ubuntu-20.04-lts/linux-azure-fde-5.15", "ecosystem": "Ubuntu:20.04:LTS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-10-28T08:20:10.795405572Z", "early_advisories": [], "license": "Sie dürfen die Auswahl von PatchFirst und unsere Ergänzungen (Prioritäten, Frühwarnungen, Texte, Zusammenfassungen und Aggregate) für eigene Zwecke einschließlich interner geschäftlicher Aufgaben frei nutzen. Weiterverkauf, kommerzielle Verbreitung und massenhafte Spiegelung dieser Auswahl oder Ergänzungen erfordern eine schriftliche Vereinbarung mit dem Betreiber. Nennen Sie bei jeder Nutzung oder Veröffentlichung der Auswahl oder unserer Ergänzungen PatchFirst (https://patchfirst.dev/vulns/) mit diesem Link zur Feedseite Ihrer Region als Quelle. Originaleinträge aus offenen Quellen unterliegen weiterhin ihren jeweiligen Lizenzen und Bedingungen. Diese Bedingungen beschränken Ihre Rechte an den Originaldaten nicht, die Sie direkt bei den Quellen beziehen können.", "terms_url": "https://patchfirst.dev/de/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst wählt Einträge aus, normalisiert und kombiniert sie; Zusammenfassungen und Übersetzungen können hinzukommen. Nachrichten werden im jeweiligen Eintrag mit einem Link zur Originalquelle belegt.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Die Lizenzen der Ursprungsdatenbanken unterscheiden sich; siehe Quellenkatalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Frei zugängliche Bewertungen; Quellenangabe erbeten (FIRST EPSS, Bewertungen von Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}