Linux Kernel CVE Statistics
24 Linux Kernel CVEs in December 2022
Full month · Source: NIST NVD
In December 2022, 24 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 1 was rated Critical, 8 were rated High severity and 15 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. December's 24 CVEs represent 9% of all 2022 Linux kernel CVEs , up from November's 17 (a 41% month-over-month increase) .
24
Total CVEs
1
Critical
8
High
15
Medium
0
Low
0
KEV Exploited
All CVEs — December 2022
24 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2022-47939 | linux | Critical | 9.8 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-afte… | |
| CVE-2022-47942 | linux | High | 8.8 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer over… | |
| CVE-2022-47940 | linux | High | 8.1 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length … | |
| CVE-2022-47943 | linux | High | 8.1 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read an… | |
| CVE-2022-47518 | linux | High | 7.8 | 2022-12-18 | An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/… | |
| CVE-2022-47521 | linux | High | 7.8 | 2022-12-18 | An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in dri… | |
| CVE-2022-47519 | linux | High | 7.8 | 2022-12-18 | An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in dri… | |
| CVE-2022-47941 | linux | High | 7.5 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree … | |
| CVE-2022-47520 | linux | High | 7.1 | 2022-12-18 | An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/… | |
| CVE-2022-47938 | linux | Medium | 6.5 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of… | |
| CVE-2022-47946 | linux | Medium | 5.5 | 2022-12-23 | An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_urin… | |
| CVE-2022-4662 | linux | Medium | 5.5 | 2022-12-22 | A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A… | |
| CVE-2022-3115 | linux | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c la… | |
| CVE-2022-3114 | linux | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks c… | |
| CVE-2022-3113 | linux | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcod… |