# Vulnerabilities published in 2022


- [GSD-2022-1006515](https://insights.sbomify.com/GSD-2022-1006515/): net/smc: Stop the CLC flow if no link to map buffers on (not scored)
- [GSD-2022-1006514](https://insights.sbomify.com/GSD-2022-1006514/): bonding: fix NULL deref in bond_rr_gen_slave_id (not scored)
- [GSD-2022-1006513](https://insights.sbomify.com/GSD-2022-1006513/): net: sched: fix possible refcount leak in tc_new_tfilter() (not scored)
- [GSD-2022-1006512](https://insights.sbomify.com/GSD-2022-1006512/): cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (not scored)
- [GSD-2022-1006511](https://insights.sbomify.com/GSD-2022-1006511/): bnxt: prevent skb UAF after handing over to PTP worker (not scored)
- [GSD-2022-1006510](https://insights.sbomify.com/GSD-2022-1006510/): s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (not scored)
- [GSD-2022-1006509](https://insights.sbomify.com/GSD-2022-1006509/): block: Do not call blk_put_queue() if gendisk allocation fails (not scored)
- [GSD-2022-1006508](https://insights.sbomify.com/GSD-2022-1006508/): fsdax: Fix infinite loop in dax_iomap_rw() (not scored)
- [GSD-2022-1006507](https://insights.sbomify.com/GSD-2022-1006507/): drm/gma500: Fix BUG: sleeping function called from invalid context errors (not scored)
- [GSD-2022-1006506](https://insights.sbomify.com/GSD-2022-1006506/): drm/gma500: Fix WARN_ON(lock->magic != lock) error (not scored)
- [GSD-2022-1006505](https://insights.sbomify.com/GSD-2022-1006505/): i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (not scored)
- [GSD-2022-1006504](https://insights.sbomify.com/GSD-2022-1006504/): i2c: mux: harden i2c_mux_alloc() against integer overflows (not scored)
- [GSD-2022-1006503](https://insights.sbomify.com/GSD-2022-1006503/): ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (not scored)
- [GSD-2022-1006502](https://insights.sbomify.com/GSD-2022-1006502/): smb3: fix temporary data corruption in collapse range (not scored)
- [GSD-2022-1006501](https://insights.sbomify.com/GSD-2022-1006501/): smb3: fix temporary data corruption in insert range (not scored)
- [GSD-2022-1006500](https://insights.sbomify.com/GSD-2022-1006500/): scsi: core: Fix a use-after-free (not scored)
- [GSD-2022-1006499](https://insights.sbomify.com/GSD-2022-1006499/): block: stop setting the nomerges flags in blk_cleanup_queue (not scored)
- [GSD-2022-1006498](https://insights.sbomify.com/GSD-2022-1006498/): block: remove QUEUE_FLAG_DEAD (not scored)
- [GSD-2022-1006497](https://insights.sbomify.com/GSD-2022-1006497/): btrfs: fix hang during unmount when stopping a space reclaim worker (not scored)
- [GSD-2022-1006496](https://insights.sbomify.com/GSD-2022-1006496/): gpio: mockup: fix NULL pointer dereference when removing debugfs (not scored)
- [GSD-2022-1006495](https://insights.sbomify.com/GSD-2022-1006495/): exfat: fix overflow for large capacity partition (not scored)
- [GSD-2022-1006494](https://insights.sbomify.com/GSD-2022-1006494/): gpio: mockup: Fix potential resource leakage when register a chip (not scored)
- [GSD-2022-1006493](https://insights.sbomify.com/GSD-2022-1006493/): gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully (not scored)
- [GSD-2022-1006492](https://insights.sbomify.com/GSD-2022-1006492/): drm/i915/gem: Really move i915_gem_context.link under ref protection (not scored)
- [GSD-2022-1006491](https://insights.sbomify.com/GSD-2022-1006491/): mm/slub: fix to return errno if kmalloc() fails (not scored)
- [GSD-2022-1006490](https://insights.sbomify.com/GSD-2022-1006490/): mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. (not scored)
- [GSD-2022-1006489](https://insights.sbomify.com/GSD-2022-1006489/): arm64: topology: fix possible overflow in amu_fie_setup() (not scored)
- [GSD-2022-1006488](https://insights.sbomify.com/GSD-2022-1006488/): dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() (not scored)
- [GSD-2022-1006487](https://insights.sbomify.com/GSD-2022-1006487/): firmware: arm_scmi: Harden accesses to the reset domains (not scored)
- [GSD-2022-1006486](https://insights.sbomify.com/GSD-2022-1006486/): ice: Don't double unplug aux on peer initiated reset (not scored)
- [GSD-2022-1006485](https://insights.sbomify.com/GSD-2022-1006485/): ice: Fix crash by keep old cfg when update TCs more than queues (not scored)
- [GSD-2022-1006484](https://insights.sbomify.com/GSD-2022-1006484/): netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (not scored)
- [GSD-2022-1006483](https://insights.sbomify.com/GSD-2022-1006483/): mm/slab_common: fix possible double free of kmem_cache (not scored)
- [GSD-2022-1006482](https://insights.sbomify.com/GSD-2022-1006482/): scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (not scored)
- [GSD-2022-1006481](https://insights.sbomify.com/GSD-2022-1006481/): ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (not scored)
- [GSD-2022-1006480](https://insights.sbomify.com/GSD-2022-1006480/): sfc: fix TX channel offset when using legacy interrupts (not scored)
- [GSD-2022-1006479](https://insights.sbomify.com/GSD-2022-1006479/): sfc: fix null pointer dereference in efx_hard_start_xmit (not scored)
- [GSD-2022-1006478](https://insights.sbomify.com/GSD-2022-1006478/): sfc/siena: fix null pointer dereference in efx_hard_start_xmit (not scored)
- [GSD-2022-1006477](https://insights.sbomify.com/GSD-2022-1006477/): wireguard: netlink: avoid variable-sized memcpy on sockaddr (not scored)
- [GSD-2022-1006476](https://insights.sbomify.com/GSD-2022-1006476/): net: enetc: deny offload of tc-based TSN features on VF interfaces (not scored)
- [GSD-2022-1006475](https://insights.sbomify.com/GSD-2022-1006475/): netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() (not scored)
- [GSD-2022-1006474](https://insights.sbomify.com/GSD-2022-1006474/): netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() (not scored)
- [GSD-2022-1006473](https://insights.sbomify.com/GSD-2022-1006473/): net/sched: taprio: avoid disabling offload when it was never enabled (not scored)
- [GSD-2022-1006472](https://insights.sbomify.com/GSD-2022-1006472/): netfilter: ebtables: fix memory leak when blob is malformed (not scored)
- [GSD-2022-1006471](https://insights.sbomify.com/GSD-2022-1006471/): net/smc: Stop the CLC flow if no link to map buffers on (not scored)
- [GSD-2022-1006470](https://insights.sbomify.com/GSD-2022-1006470/): bonding: fix NULL deref in bond_rr_gen_slave_id (not scored)
- [GSD-2022-1006469](https://insights.sbomify.com/GSD-2022-1006469/): net: sched: fix possible refcount leak in tc_new_tfilter() (not scored)
- [GSD-2022-1006468](https://insights.sbomify.com/GSD-2022-1006468/): bnxt: prevent skb UAF after handing over to PTP worker (not scored)
- [GSD-2022-1006467](https://insights.sbomify.com/GSD-2022-1006467/): cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (not scored)
- [GSD-2022-1006466](https://insights.sbomify.com/GSD-2022-1006466/): block: Do not call blk_put_queue() if gendisk allocation fails (not scored)
- [GSD-2022-1006465](https://insights.sbomify.com/GSD-2022-1006465/): s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (not scored)
- [GSD-2022-1006464](https://insights.sbomify.com/GSD-2022-1006464/): drm/gma500: Fix BUG: sleeping function called from invalid context errors (not scored)
- [GSD-2022-1006463](https://insights.sbomify.com/GSD-2022-1006463/): drm/gma500: Fix WARN_ON(lock->magic != lock) error (not scored)
- [GSD-2022-1006462](https://insights.sbomify.com/GSD-2022-1006462/): fsdax: Fix infinite loop in dax_iomap_rw() (not scored)
- [GSD-2022-1006461](https://insights.sbomify.com/GSD-2022-1006461/): i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (not scored)
- [GSD-2022-1006460](https://insights.sbomify.com/GSD-2022-1006460/): i2c: mux: harden i2c_mux_alloc() against integer overflows (not scored)
- [GSD-2022-1006459](https://insights.sbomify.com/GSD-2022-1006459/): ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (not scored)
- [GSD-2022-1006457](https://insights.sbomify.com/GSD-2022-1006457/): drm/radeon: add a force flush to delay work when radeon (not scored)
- [GSD-2022-1006456](https://insights.sbomify.com/GSD-2022-1006456/): ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (not scored)
- [GSD-2022-1006455](https://insights.sbomify.com/GSD-2022-1006455/): ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (not scored)
- [GSD-2022-1006454](https://insights.sbomify.com/GSD-2022-1006454/): sch_sfb: Don't assume the skb is still around after enqueueing to child (not scored)
- [GSD-2022-1006453](https://insights.sbomify.com/GSD-2022-1006453/): scsi: mpt3sas: Fix use-after-free warning (not scored)
- [GSD-2022-1006452](https://insights.sbomify.com/GSD-2022-1006452/): ieee802154: cc2520: add rc code in cc2520_tx() (not scored)
- [GSD-2022-1006451](https://insights.sbomify.com/GSD-2022-1006451/): wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (not scored)
- [GSD-2022-1006450](https://insights.sbomify.com/GSD-2022-1006450/): efi: capsule-loader: Fix use-after-free in efi_capsule_write (not scored)
- [GSD-2022-1006449](https://insights.sbomify.com/GSD-2022-1006449/): drm/radeon: add a force flush to delay work when radeon (not scored)
- [GSD-2022-1006448](https://insights.sbomify.com/GSD-2022-1006448/): ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (not scored)
- [GSD-2022-1006447](https://insights.sbomify.com/GSD-2022-1006447/): ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (not scored)
- [GSD-2022-1006446](https://insights.sbomify.com/GSD-2022-1006446/): scsi: mpt3sas: Fix use-after-free warning (not scored)
- [GSD-2022-1006445](https://insights.sbomify.com/GSD-2022-1006445/): sch_sfb: Don't assume the skb is still around after enqueueing to child (not scored)
- [GSD-2022-1006444](https://insights.sbomify.com/GSD-2022-1006444/): ipv6: sr: fix out-of-bounds read when setting HMAC data. (not scored)
- [GSD-2022-1006443](https://insights.sbomify.com/GSD-2022-1006443/): ieee802154: cc2520: add rc code in cc2520_tx() (not scored)
- [GSD-2022-1006442](https://insights.sbomify.com/GSD-2022-1006442/): wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (not scored)
- [GSD-2022-1006441](https://insights.sbomify.com/GSD-2022-1006441/): efi: capsule-loader: Fix use-after-free in efi_capsule_write (not scored)
- [GSD-2022-1006440](https://insights.sbomify.com/GSD-2022-1006440/): drm/radeon: add a force flush to delay work when radeon (not scored)
- [GSD-2022-1006439](https://insights.sbomify.com/GSD-2022-1006439/): ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (not scored)
- [GSD-2022-1006438](https://insights.sbomify.com/GSD-2022-1006438/): ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (not scored)
- [GSD-2022-1006437](https://insights.sbomify.com/GSD-2022-1006437/): debugfs: add debugfs_lookup_and_remove() (not scored)
- [GSD-2022-1006436](https://insights.sbomify.com/GSD-2022-1006436/): soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (not scored)
- [GSD-2022-1006435](https://insights.sbomify.com/GSD-2022-1006435/): scsi: mpt3sas: Fix use-after-free warning (not scored)
- [GSD-2022-1006434](https://insights.sbomify.com/GSD-2022-1006434/): sch_sfb: Don't assume the skb is still around after enqueueing to child (not scored)
- [GSD-2022-1006433](https://insights.sbomify.com/GSD-2022-1006433/): i40e: Fix kernel crash during module removal (not scored)
- [GSD-2022-1006432](https://insights.sbomify.com/GSD-2022-1006432/): ipv6: sr: fix out-of-bounds read when setting HMAC data. (not scored)
- [GSD-2022-1006431](https://insights.sbomify.com/GSD-2022-1006431/): ieee802154: cc2520: add rc code in cc2520_tx() (not scored)
- [GSD-2022-1006430](https://insights.sbomify.com/GSD-2022-1006430/): wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (not scored)
- [GSD-2022-1006429](https://insights.sbomify.com/GSD-2022-1006429/): efi: capsule-loader: Fix use-after-free in efi_capsule_write (not scored)
- [GSD-2022-1006428](https://insights.sbomify.com/GSD-2022-1006428/): drm/gem: Fix GEM handle release errors (not scored)
- [GSD-2022-1006427](https://insights.sbomify.com/GSD-2022-1006427/): drm/radeon: add a force flush to delay work when radeon (not scored)
- [GSD-2022-1006426](https://insights.sbomify.com/GSD-2022-1006426/): ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (not scored)
- [GSD-2022-1006425](https://insights.sbomify.com/GSD-2022-1006425/): ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (not scored)
- [GSD-2022-1006424](https://insights.sbomify.com/GSD-2022-1006424/): debugfs: add debugfs_lookup_and_remove() (not scored)
- [GSD-2022-1006423](https://insights.sbomify.com/GSD-2022-1006423/): nvmet: fix a use-after-free (not scored)
- [GSD-2022-1006422](https://insights.sbomify.com/GSD-2022-1006422/): soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (not scored)
- [GSD-2022-1006421](https://insights.sbomify.com/GSD-2022-1006421/): scsi: mpt3sas: Fix use-after-free warning (not scored)
- [GSD-2022-1006420](https://insights.sbomify.com/GSD-2022-1006420/): sch_sfb: Don't assume the skb is still around after enqueueing to child (not scored)
- [GSD-2022-1006419](https://insights.sbomify.com/GSD-2022-1006419/): i40e: Fix kernel crash during module removal (not scored)
- [GSD-2022-1006418](https://insights.sbomify.com/GSD-2022-1006418/): ipv6: sr: fix out-of-bounds read when setting HMAC data. (not scored)
- [GSD-2022-1006417](https://insights.sbomify.com/GSD-2022-1006417/): nvme-tcp: fix UAF when detecting digest errors (not scored)
- [GSD-2022-1006416](https://insights.sbomify.com/GSD-2022-1006416/): ieee802154: cc2520: add rc code in cc2520_tx() (not scored)
- [GSD-2022-1006415](https://insights.sbomify.com/GSD-2022-1006415/): wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/102/