Amazon Linux 2 Security Advisory: ALAS2KERNEL-5.15-2022-008
Advisory Released Date: 2022-10-11
Advisory Updated Date: 2025-08-26
FAQs regarding Amazon Linux ALAS/CVE Severity
In the Linux kernel, the following vulnerability has been resolved:
i2c: Fix a potential use after free
Free the adap structure only after we are done using it.
This patch just moves the put_device() down a bit to avoid the
use after free.
[wsa: added comment to the code, added Fixes tag] (CVE-2019-25162)
A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2022-1679)
A use-after-free flaw was found in the Linux kernel's POSIX CPU timers functionality in the way a user creates and then deletes the timer in the non-leader thread of the program. This flaw allows a local user to crash or potentially escalate their privileges on the system. (CVE-2022-2585)
It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. (CVE-2022-2586)
A use-after-free flaw was found in route4_change in the net/sched/cls_route.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. (CVE-2022-2588)
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. (CVE-2022-26373)
An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. (CVE-2022-2663)
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data. (CVE-2022-2905)
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket. (CVE-2022-3028)
A use-after-free flaw was found in io_uring in the Linux kernel. This flaw allows a local user to trigger the issue if a signalfd or binder fd is polled with the io_uring poll due to a lack of io_uring POLLFREE handling. (CVE-2022-3176)
A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition. (CVE-2022-3303)
A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211929 was assigned to this vulnerability. (CVE-2022-3625)
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs. (CVE-2022-39188)
A flaw was found in the x86 KVM subsystem in kvm_steal_time_set_preempted in arch/x86/kvm/x86.c in the Linux kernel. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations. (CVE-2022-39189)
An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain. (CVE-2022-39190)
A race condition in the Linux kernel's EFI capsule loader driver was found in the way it handled write and flush operations on the device node of the EFI capsule. A local user could potentially use this flaw to crash the system. (CVE-2022-40307)
In the Linux kernel, the following vulnerability has been resolved:
IB/core: Fix a nested dead lock as part of ODP flow (CVE-2022-48675)
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: fix UAF when detecting digest errors (CVE-2022-48686)
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised via netlink through four attributes: SEG6_ATTR_HMACKEYID, SEG6_ATTR_SECRET, SEG6_ATTR_SECRETLEN and SEG6_ATTR_ALGID. (CVE-2022-48687)
In the Linux kernel, the following vulnerability has been resolved:
tcp: TX zerocopy should not sense pfmemalloc status (CVE-2022-48689)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: clean up hook list when offload flags check fails (CVE-2022-48691)
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Fix use-after-free warning (CVE-2022-48695)
In the Linux kernel, the following vulnerability has been resolved:
sched/debug: fix dentry leak in update_sched_domain_debugfs (CVE-2022-48699)
In the Linux kernel, the following vulnerability has been resolved:
vfio/type1: Unpin zero pages (CVE-2022-48700)
In the Linux kernel, the following vulnerability has been resolved:
USB: core: Prevent nested device-reset calls (CVE-2022-49936)
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix small mempool leak in SMB2_negotiate() (CVE-2022-49938)
In the Linux kernel, the following vulnerability has been resolved:
vt: Clear selection before changing the font (CVE-2022-49948)
In the Linux kernel, the following vulnerability has been resolved:
net/sched: fix netdevice reference leaks in attach_default_qdiscs() (CVE-2022-49958)
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix memory leak at failed datapath creation (CVE-2022-49959)
In the Linux kernel, the following vulnerability has been resolved:
arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (CVE-2022-49964)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't redirect packets with invalid pkt_len (CVE-2022-49975)
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CVE-2022-49977)
In the Linux kernel, the following vulnerability has been resolved:
net: fix refcount bug in sk_psock_get (2) (CVE-2022-49979)
In the Linux kernel, the following vulnerability has been resolved:
HID: hidraw: fix memory leak in hidraw_release() (CVE-2022-49981)
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (CVE-2022-49984)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't use tnum_range on array range checking for poke descriptors (CVE-2022-49985)
In the Linux kernel, the following vulnerability has been resolved:
scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (CVE-2022-49986)
In the Linux kernel, the following vulnerability has been resolved:
md: call __md_stop_writes in md_stop (CVE-2022-49987)
In the Linux kernel, the following vulnerability has been resolved:
xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (CVE-2022-49989)
In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (CVE-2022-49991)
In the Linux kernel, the following vulnerability has been resolved:
loop: Check for overflow while configuring loop (CVE-2022-49993)
In the Linux kernel, the following vulnerability has been resolved:
bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem (CVE-2022-49994)
In the Linux kernel, the following vulnerability has been resolved:
writeback: avoid use-after-free after removing device (CVE-2022-49995)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() (CVE-2022-49996)
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix locking in rxrpc's sendmsg (CVE-2022-49998)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix space cache corruption and potential double allocations (CVE-2022-49999)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: fix stuck flows on cleanup due to pending work (CVE-2022-50000)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: policy: fix metadata dst->dev xmit null pointer dereference (CVE-2022-50004)
In the Linux kernel, the following vulnerability has been resolved:
NFSv4.2 fix problems with __nfs42_ssc_open (CVE-2022-50006)
In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix refcount leak in __xfrm_policy_check() (CVE-2022-50007)
In the Linux kernel, the following vulnerability has been resolved:
kprobes: don't call disarm_kprobe() for disabled kprobes (CVE-2022-50008)
In the Linux kernel, the following vulnerability has been resolved:
drivers:md:fix a potential use-after-free bug (CVE-2022-50022)
In the Linux kernel, the following vulnerability has been resolved:
net: genl: fix error path memory leak in policy dumping (CVE-2022-50042)
In the Linux kernel, the following vulnerability has been resolved:
net: fix potential refcount leak in ndisc_router_discovery() (CVE-2022-50043)
In the Linux kernel, the following vulnerability has been resolved:
net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() (CVE-2022-50046)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: possible module reference underflow in error path (CVE-2022-50048)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix missing i_op in ntfs_read_mft (CVE-2022-50056)
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr (CVE-2022-50057)
In the Linux kernel, the following vulnerability has been resolved:
ceph: don't leak snap_rwsem in handle_cap_grant (CVE-2022-50059)
In the Linux kernel, the following vulnerability has been resolved:
virtio_net: fix memory leak inside XPD_TX with mergeable (CVE-2022-50065)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (CVE-2022-50067)
In the Linux kernel, the following vulnerability has been resolved:
drm/ttm: Fix dummy res NULL ptr deref bug (CVE-2022-50068)
In the Linux kernel, the following vulnerability has been resolved:
BPF: Fix potential bad pointer dereference in bpf_sys_bpf() (CVE-2022-50069)
In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pnfs: Fix a use-after-free bug in open (CVE-2022-50072)
In the Linux kernel, the following vulnerability has been resolved:
tracing/eprobes: Have event probes be consistent with kprobes and uprobes (CVE-2022-50075)
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix memory leak on the deferred close (CVE-2022-50076)
In the Linux kernel, the following vulnerability has been resolved:
tracing/eprobes: Do not allow eprobes to use $stack, or % for regs (CVE-2022-50078)
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix warning in ext4_iomap_begin as race between bmap and write (CVE-2022-50082)
In the Linux kernel, the following vulnerability has been resolved:
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (CVE-2022-50083)
In the Linux kernel, the following vulnerability has been resolved:
dm raid: fix address sanitizer warning in raid_status (CVE-2022-50084)
In the Linux kernel, the following vulnerability has been resolved:
dm raid: fix address sanitizer warning in raid_resume (CVE-2022-50085)
In the Linux kernel, the following vulnerability has been resolved:
block: don't allow the same type rq_qos add more than once (CVE-2022-50086)
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: ensure pages are unlocked on cow_file_range() failure (CVE-2022-50089)
In the Linux kernel, the following vulnerability has been resolved:
btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size (CVE-2022-50090)
In the Linux kernel, the following vulnerability has been resolved:
locking/csd_lock: Change csdlock_debug from early_param to __setup (CVE-2022-50091)
In the Linux kernel, the following vulnerability has been resolved:
dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (CVE-2022-50092)
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (CVE-2022-50093)
In the Linux kernel, the following vulnerability has been resolved:
x86/kprobes: Update kcb status flag after singlestepping (CVE-2022-50096)
In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: s3fb: Check the size of screen before memset_io() (CVE-2022-50097)
In the Linux kernel, the following vulnerability has been resolved:
sched/core: Do not requeue task on CPU excluded from cpus_mask (CVE-2022-50100)
In the Linux kernel, the following vulnerability has been resolved:
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (CVE-2022-50103)
In the Linux kernel, the following vulnerability has been resolved:
jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted (CVE-2022-50126)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix a window for use-after-free (CVE-2022-50137)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (CVE-2022-50138)
In the Linux kernel, the following vulnerability has been resolved:
mm/mempolicy: fix get_nodes out of bound access (CVE-2022-50147)
In the Linux kernel, the following vulnerability has been resolved:
driver core: fix potential deadlock in __driver_attach (CVE-2022-50149)
In the Linux kernel, the following vulnerability has been resolved:
usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (CVE-2022-50153)
In the Linux kernel, the following vulnerability has been resolved:
of: check previous kernel's ima-kexec-buffer against memory bounds (CVE-2022-50159)
In the Linux kernel, the following vulnerability has been resolved:
selinux: Add boundary check in put_entry() (CVE-2022-50200)
In the Linux kernel, the following vulnerability has been resolved:
selinux: fix memleak in security_read_state_kernel() (CVE-2022-50201)
In the Linux kernel, the following vulnerability has been resolved:
PM: hibernate: defer device probing when resuming from hibernation (CVE-2022-50202)
In the Linux kernel, the following vulnerability has been resolved:
ext2: Add more validity checks for inode counts (CVE-2022-50205)
In the Linux kernel, the following vulnerability has been resolved:
arm64: fix oops in concurrently setting insn_emulation sysctls (CVE-2022-50206)
In the Linux kernel, the following vulnerability has been resolved:
md-raid10: fix KASAN warning (CVE-2022-50211)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (CVE-2022-50212)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: do not allow SET_ID to refer to another table (CVE-2022-50213)
In the Linux kernel, the following vulnerability has been resolved:
scsi: sg: Allow waiting for commands to complete on removed device (CVE-2022-50215)
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix KASAN use-after-free Read in compute_effective_progs (CVE-2022-50219)
In the Linux kernel, the following vulnerability has been resolved:
tty: vt: initialize unicode screen buffer (CVE-2022-50222)
In the Linux kernel, the following vulnerability has been resolved:
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228)
In the Linux kernel, the following vulnerability has been resolved:
arm64: set UXN on swapper page tables (CVE-2022-50230)
In the Linux kernel, the following vulnerability has been resolved:
crypto: arm64/poly1305 - fix a read out-of-bound (CVE-2022-50231)
In the Linux kernel, the following vulnerability has been resolved:
arm64: set UXN on swapper page tables (CVE-2022-50232)
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference. (CVE-2023-1095)
A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system. (CVE-2023-2019)
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors. (CVE-2023-2513)
The upstream advisory describes this issue as follows:
"This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the processing of seg6 attributes. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilties to escalate privileges and execute arbitrary code in the context of the kernel." (CVE-2023-2860)
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag(). (CVE-2023-3111)
A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information (CVE-2023-4394)
A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated delayed work to complete. However, wb_inode_writeback_end() may schedule bandwidth estimation work after this has completed, which can result in the timer attempting to access the recently freed bdi_writeback. (CVE-2024-0562)
Affected Packages:
kernel
Note:
This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update kernel or yum update --advisory ALAS2KERNEL-5.15-2022-008 to update your system.
aarch64:
kernel-5.15.69-37.134.amzn2.aarch64
kernel-headers-5.15.69-37.134.amzn2.aarch64
kernel-debuginfo-common-aarch64-5.15.69-37.134.amzn2.aarch64
perf-5.15.69-37.134.amzn2.aarch64
perf-debuginfo-5.15.69-37.134.amzn2.aarch64
python-perf-5.15.69-37.134.amzn2.aarch64
python-perf-debuginfo-5.15.69-37.134.amzn2.aarch64
kernel-tools-5.15.69-37.134.amzn2.aarch64
kernel-tools-devel-5.15.69-37.134.amzn2.aarch64
kernel-tools-debuginfo-5.15.69-37.134.amzn2.aarch64
bpftool-5.15.69-37.134.amzn2.aarch64
bpftool-debuginfo-5.15.69-37.134.amzn2.aarch64
kernel-devel-5.15.69-37.134.amzn2.aarch64
kernel-debuginfo-5.15.69-37.134.amzn2.aarch64
kernel-livepatch-5.15.69-37.134-1.0-0.amzn2.aarch64
i686:
kernel-headers-5.15.69-37.134.amzn2.i686
src:
kernel-5.15.69-37.134.amzn2.src
x86_64:
kernel-5.15.69-37.134.amzn2.x86_64
kernel-headers-5.15.69-37.134.amzn2.x86_64
kernel-debuginfo-common-x86_64-5.15.69-37.134.amzn2.x86_64
perf-5.15.69-37.134.amzn2.x86_64
perf-debuginfo-5.15.69-37.134.amzn2.x86_64
python-perf-5.15.69-37.134.amzn2.x86_64
python-perf-debuginfo-5.15.69-37.134.amzn2.x86_64
kernel-tools-5.15.69-37.134.amzn2.x86_64
kernel-tools-devel-5.15.69-37.134.amzn2.x86_64
kernel-tools-debuginfo-5.15.69-37.134.amzn2.x86_64
bpftool-5.15.69-37.134.amzn2.x86_64
bpftool-debuginfo-5.15.69-37.134.amzn2.x86_64
kernel-devel-5.15.69-37.134.amzn2.x86_64
kernel-debuginfo-5.15.69-37.134.amzn2.x86_64
kernel-livepatch-5.15.69-37.134-1.0-0.amzn2.x86_64
2025-08-26: CVE-2022-49958 was added to this advisory.
2025-08-26: CVE-2022-50201 was added to this advisory.
2025-08-26: CVE-2022-49975 was added to this advisory.
2025-08-26: CVE-2022-50089 was added to this advisory.
2025-08-26: CVE-2022-49959 was added to this advisory.
2025-08-26: CVE-2022-50046 was added to this advisory.
2025-08-26: CVE-2022-50093 was added to this advisory.
2025-08-26: CVE-2022-50006 was added to this advisory.
2025-08-26: CVE-2022-50090 was added to this advisory.
2025-08-26: CVE-2022-50007 was added to this advisory.
2025-07-29: CVE-2022-49938 was added to this advisory.
2025-07-29: CVE-2022-50084 was added to this advisory.
2025-07-29: CVE-2022-50043 was added to this advisory.
2025-07-29: CVE-2022-50137 was added to this advisory.
2025-07-29: CVE-2022-49979 was added to this advisory.
2025-07-29: CVE-2022-50100 was added to this advisory.
2025-07-29: CVE-2022-50059 was added to this advisory.
2025-07-29: CVE-2022-50082 was added to this advisory.
2025-07-29: CVE-2022-50219 was added to this advisory.
2025-07-29: CVE-2022-50078 was added to this advisory.
2025-07-29: CVE-2022-50230 was added to this advisory.
2025-07-29: CVE-2022-49981 was added to this advisory.
2025-07-29: CVE-2022-50087 was added to this advisory.
2025-07-29: CVE-2022-50065 was added to this advisory.
2025-07-29: CVE-2022-50085 was added to this advisory.
2025-07-29: CVE-2022-49936 was added to this advisory.
2025-07-29: CVE-2022-49996 was added to this advisory.
2025-07-29: CVE-2022-50213 was added to this advisory.
2025-07-29: CVE-2022-50138 was added to this advisory.
2025-07-29: CVE-2022-49985 was added to this advisory.
2025-07-29: CVE-2022-49999 was added to this advisory.
2025-07-29: CVE-2022-50075 was added to this advisory.
2025-07-29: CVE-2022-50091 was added to this advisory.
2025-07-29: CVE-2022-49989 was added to this advisory.
2025-07-29: CVE-2022-49995 was added to this advisory.
2025-07-29: CVE-2022-50042 was added to this advisory.
2025-07-29: CVE-2022-50206 was added to this advisory.
2025-07-29: CVE-2022-49948 was added to this advisory.
2025-07-29: CVE-2022-50215 was added to this advisory.
2025-07-29: CVE-2022-50086 was added to this advisory.
2025-07-29: CVE-2022-50022 was added to this advisory.
2025-07-29: CVE-2022-50067 was added to this advisory.
2025-07-29: CVE-2022-50222 was added to this advisory.
2025-07-29: CVE-2022-50048 was added to this advisory.
2025-07-29: CVE-2022-50231 was added to this advisory.
2025-07-29: CVE-2022-50153 was added to this advisory.
2025-07-29: CVE-2022-50076 was added to this advisory.
2025-07-29: CVE-2022-50159 was added to this advisory.
2025-07-03: CVE-2022-50083 was added to this advisory.
2025-07-03: CVE-2022-49993 was added to this advisory.
2025-07-03: CVE-2022-50097 was added to this advisory.
2025-07-03: CVE-2022-50056 was added to this advisory.
2025-07-03: CVE-2022-50103 was added to this advisory.
2025-07-03: CVE-2022-50092 was added to this advisory.
2025-07-03: CVE-2022-50228 was added to this advisory.
2025-07-03: CVE-2022-50057 was added to this advisory.
2025-07-03: CVE-2022-50147 was added to this advisory.
2025-07-03: CVE-2022-50072 was added to this advisory.
2025-07-03: CVE-2022-49991 was added to this advisory.
2025-07-03: CVE-2022-49964 was added to this advisory.
2025-07-03: CVE-2022-49977 was added to this advisory.
2025-07-03: CVE-2022-50068 was added to this advisory.
2025-07-03: CVE-2022-50069 was added to this advisory.
2025-07-03: CVE-2022-50205 was added to this advisory.
2025-07-03: CVE-2022-49986 was added to this advisory.
2025-07-03: CVE-2022-49984 was added to this advisory.
2025-07-03: CVE-2022-50202 was added to this advisory.
2025-07-03: CVE-2022-50212 was added to this advisory.
2025-07-03: CVE-2022-49998 was added to this advisory.
2025-07-03: CVE-2022-50149 was added to this advisory.
2025-07-03: CVE-2022-50232 was added to this advisory.
2025-07-03: CVE-2022-50096 was added to this advisory.
2025-07-03: CVE-2022-50126 was added to this advisory.
2025-07-03: CVE-2022-50000 was added to this advisory.
2025-07-03: CVE-2022-50004 was added to this advisory.
2025-07-03: CVE-2022-49994 was added to this advisory.
2025-07-03: CVE-2022-50008 was added to this advisory.
2025-07-03: CVE-2022-49987 was added to this advisory.
2025-07-03: CVE-2022-50211 was added to this advisory.
2025-07-03: CVE-2022-50200 was added to this advisory.
2024-08-27: CVE-2022-48699 was added to this advisory.
2024-08-27: CVE-2022-48686 was added to this advisory.
2024-08-27: CVE-2022-48675 was added to this advisory.
2024-08-27: CVE-2022-48689 was added to this advisory.
2024-08-27: CVE-2022-48700 was added to this advisory.
2024-08-27: CVE-2022-48691 was added to this advisory.
2024-08-27: CVE-2022-48695 was added to this advisory.
2024-07-03: CVE-2019-25162 was added to this advisory.
2024-07-03: CVE-2023-4394 was added to this advisory.
2024-06-06: CVE-2022-48687 was added to this advisory.
2024-04-10: CVE-2023-1095 was added to this advisory.
2024-02-01: CVE-2024-0562 was added to this advisory.
2023-10-12: CVE-2023-3111 was added to this advisory.
2023-10-12: CVE-2023-2860 was added to this advisory.