# Vulnerabilities published in 2022


- [GSD-2022-1005712](https://insights.sbomify.com/GSD-2022-1005712/): clk: bcm: rpi: Prevent out-of-bounds access (not scored)
- [GSD-2022-1005711](https://insights.sbomify.com/GSD-2022-1005711/): hwmon: (gpio-fan) Fix array out of bounds access (not scored)
- [GSD-2022-1005710](https://insights.sbomify.com/GSD-2022-1005710/): xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (not scored)
- [GSD-2022-1005709](https://insights.sbomify.com/GSD-2022-1005709/): wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (not scored)
- [GSD-2022-1005708](https://insights.sbomify.com/GSD-2022-1005708/): vt: Clear selection before changing the font (not scored)
- [GSD-2022-1005707](https://insights.sbomify.com/GSD-2022-1005707/): binder: fix UAF of ref->proc caused by race condition (not scored)
- [GSD-2022-1005706](https://insights.sbomify.com/GSD-2022-1005706/): media: mceusb: Use new usb_control_msg_*() routines (not scored)
- [GSD-2022-1005705](https://insights.sbomify.com/GSD-2022-1005705/): USB: core: Prevent nested device-reset calls (not scored)
- [GSD-2022-1005704](https://insights.sbomify.com/GSD-2022-1005704/): wifi: mac80211: Fix UAF in ieee80211_scan_rx() (not scored)
- [GSD-2022-1005703](https://insights.sbomify.com/GSD-2022-1005703/): ALSA: seq: oss: Fix data-race for max_midi_devs access (not scored)
- [GSD-2022-1005702](https://insights.sbomify.com/GSD-2022-1005702/): ALSA: seq: Fix data-race at module auto-loading (not scored)
- [GSD-2022-1005701](https://insights.sbomify.com/GSD-2022-1005701/): crypto: arm64/poly1305 - fix a read out-of-bound (not scored)
- [GSD-2022-1005700](https://insights.sbomify.com/GSD-2022-1005700/): arm64: set UXN on swapper page tables (not scored)
- [GSD-2022-1005699](https://insights.sbomify.com/GSD-2022-1005699/): ALSA: bcd2000: Fix a UAF bug on the error path of probing (not scored)
- [GSD-2022-1005698](https://insights.sbomify.com/GSD-2022-1005698/): nfsd: eliminate the NFSD_FILE_BREAK_* flags (not scored)
- [GSD-2022-1005697](https://insights.sbomify.com/GSD-2022-1005697/): KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (not scored)
- [GSD-2022-1005696](https://insights.sbomify.com/GSD-2022-1005696/): KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (not scored)
- [GSD-2022-1005695](https://insights.sbomify.com/GSD-2022-1005695/): KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (not scored)
- [GSD-2022-1005694](https://insights.sbomify.com/GSD-2022-1005694/): KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (not scored)
- [GSD-2022-1005693](https://insights.sbomify.com/GSD-2022-1005693/): lockd: detect and reject lock arguments that overflow (not scored)
- [GSD-2022-1005692](https://insights.sbomify.com/GSD-2022-1005692/): crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (not scored)
- [GSD-2022-1005691](https://insights.sbomify.com/GSD-2022-1005691/): riscv:uprobe fix SR_SPIE set/clear handling (not scored)
- [GSD-2022-1005690](https://insights.sbomify.com/GSD-2022-1005690/): RISC-V: Fixup get incorrect user mode PC for kernel mode regs (not scored)
- [GSD-2022-1005689](https://insights.sbomify.com/GSD-2022-1005689/): RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context (not scored)
- [GSD-2022-1005688](https://insights.sbomify.com/GSD-2022-1005688/): RISC-V: Fixup schedule out issue in machine_crash_shutdown() (not scored)
- [GSD-2022-1005687](https://insights.sbomify.com/GSD-2022-1005687/): rtc: rx8025: fix 12/24 hour mode detection on RX-8035 (not scored)
- [GSD-2022-1005686](https://insights.sbomify.com/GSD-2022-1005686/): drm/nouveau: fix another off-by-one in nvbios_addr (not scored)
- [GSD-2022-1005685](https://insights.sbomify.com/GSD-2022-1005685/): tty: vt: initialize unicode screen buffer (not scored)
- [GSD-2022-1005684](https://insights.sbomify.com/GSD-2022-1005684/): bpf: Fix KASAN use-after-free Read in compute_effective_progs (not scored)
- [GSD-2022-1005683](https://insights.sbomify.com/GSD-2022-1005683/): iio: light: isl29028: Fix the warning in isl29028_remove() (not scored)
- [GSD-2022-1005682](https://insights.sbomify.com/GSD-2022-1005682/): ksmbd: fix memory leak in smb2_handle_negotiate (not scored)
- [GSD-2022-1005681](https://insights.sbomify.com/GSD-2022-1005681/): usbnet: Fix linkwatch use-after-free on disconnect (not scored)
- [GSD-2022-1005680](https://insights.sbomify.com/GSD-2022-1005680/): ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT (not scored)
- [GSD-2022-1005679](https://insights.sbomify.com/GSD-2022-1005679/): ksmbd: prevent out of bound read for SMB2_WRITE (not scored)
- [GSD-2022-1005678](https://insights.sbomify.com/GSD-2022-1005678/): ksmbd: fix use-after-free bug in smb2_tree_disconect (not scored)
- [GSD-2022-1005677](https://insights.sbomify.com/GSD-2022-1005677/): ksmbd: fix heap-based overflow in set_ntacl_dacl() (not scored)
- [GSD-2022-1005676](https://insights.sbomify.com/GSD-2022-1005676/): md-raid: destroy the bitmap after destroying the thread (not scored)
- [GSD-2022-1005675](https://insights.sbomify.com/GSD-2022-1005675/): coresight: Clear the connection field properly (not scored)
- [GSD-2022-1005674](https://insights.sbomify.com/GSD-2022-1005674/): netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (not scored)
- [GSD-2022-1005673](https://insights.sbomify.com/GSD-2022-1005673/): netfilter: nf_tables: do not allow SET_ID to refer to another table (not scored)
- [GSD-2022-1005672](https://insights.sbomify.com/GSD-2022-1005672/): netfilter: nf_tables: fix null deref due to zeroed list head (not scored)
- [GSD-2022-1005671](https://insights.sbomify.com/GSD-2022-1005671/): btrfs: reject log replay if there is unsupported RO compat flag (not scored)
- [GSD-2022-1005670](https://insights.sbomify.com/GSD-2022-1005670/): scsi: sg: Allow waiting for commands to complete on removed device (not scored)
- [GSD-2022-1005669](https://insights.sbomify.com/GSD-2022-1005669/): md-raid10: fix KASAN warning (not scored)
- [GSD-2022-1005668](https://insights.sbomify.com/GSD-2022-1005668/): MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (not scored)
- [GSD-2022-1005667](https://insights.sbomify.com/GSD-2022-1005667/): arm64: fix oops in concurrently setting insn_emulation sysctls (not scored)
- [GSD-2022-1005666](https://insights.sbomify.com/GSD-2022-1005666/): arm64: Do not forget syscall when starting a new thread. (not scored)
- [GSD-2022-1005665](https://insights.sbomify.com/GSD-2022-1005665/): arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags" (not scored)
- [GSD-2022-1005664](https://insights.sbomify.com/GSD-2022-1005664/): ARM: OMAP2+: display: Fix refcount leak bug (not scored)
- [GSD-2022-1005663](https://insights.sbomify.com/GSD-2022-1005663/): ext2: Add more validity checks for inode counts (not scored)
- [GSD-2022-1005662](https://insights.sbomify.com/GSD-2022-1005662/): ARM: OMAP2+: pdata-quirks: Fix refcount leak bug (not scored)
- [GSD-2022-1005661](https://insights.sbomify.com/GSD-2022-1005661/): PM: hibernate: defer device probing when resuming from hibernation (not scored)
- [GSD-2022-1005660](https://insights.sbomify.com/GSD-2022-1005660/): meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (not scored)
- [GSD-2022-1005659](https://insights.sbomify.com/GSD-2022-1005659/): selinux: fix memleak in security_read_state_kernel() (not scored)
- [GSD-2022-1005658](https://insights.sbomify.com/GSD-2022-1005658/): selinux: Add boundary check in put_entry() (not scored)
- [GSD-2022-1005657](https://insights.sbomify.com/GSD-2022-1005657/): ARM: bcm: Fix refcount leak in bcm_kona_smc_init (not scored)
- [GSD-2022-1005656](https://insights.sbomify.com/GSD-2022-1005656/): x86/pmem: Fix platform-device leak in error path (not scored)
- [GSD-2022-1005655](https://insights.sbomify.com/GSD-2022-1005655/): kasan: test: Silence GCC 12 warnings (not scored)
- [GSD-2022-1005654](https://insights.sbomify.com/GSD-2022-1005654/): soc: amlogic: Fix refcount leak in meson-secure-pwrc.c (not scored)
- [GSD-2022-1005653](https://insights.sbomify.com/GSD-2022-1005653/): ARM: OMAP2+: Fix refcount leak in omapdss_init_of (not scored)
- [GSD-2022-1005652](https://insights.sbomify.com/GSD-2022-1005652/): arm64: select TRACE_IRQFLAGS_NMI_SUPPORT (not scored)
- [GSD-2022-1005651](https://insights.sbomify.com/GSD-2022-1005651/): ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (not scored)
- [GSD-2022-1005650](https://insights.sbomify.com/GSD-2022-1005650/): cpufreq: zynq: Fix refcount leak in zynq_get_revision (not scored)
- [GSD-2022-1005649](https://insights.sbomify.com/GSD-2022-1005649/): soc: qcom: ocmem: Fix refcount leak in of_get_ocmem (not scored)
- [GSD-2022-1005648](https://insights.sbomify.com/GSD-2022-1005648/): bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (not scored)
- [GSD-2022-1005647](https://insights.sbomify.com/GSD-2022-1005647/): soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (not scored)
- [GSD-2022-1005646](https://insights.sbomify.com/GSD-2022-1005646/): spi: Fix simplification of devm_spi_register_controller (not scored)
- [GSD-2022-1005645](https://insights.sbomify.com/GSD-2022-1005645/): spi: tegra20-slink: fix UAF in tegra_slink_remove() (not scored)
- [GSD-2022-1005644](https://insights.sbomify.com/GSD-2022-1005644/): regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (not scored)
- [GSD-2022-1005643](https://insights.sbomify.com/GSD-2022-1005643/): pwm: lpc18xx: Fix period handling (not scored)
- [GSD-2022-1005642](https://insights.sbomify.com/GSD-2022-1005642/): drm/meson: Fix refcount leak in meson_encoder_hdmi_init (not scored)
- [GSD-2022-1005641](https://insights.sbomify.com/GSD-2022-1005641/): ath11k: fix netdev open race (not scored)
- [GSD-2022-1005640](https://insights.sbomify.com/GSD-2022-1005640/): drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (not scored)
- [GSD-2022-1005639](https://insights.sbomify.com/GSD-2022-1005639/): drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init (not scored)
- [GSD-2022-1005638](https://insights.sbomify.com/GSD-2022-1005638/): virtio-gpu: fix a missing check to avoid NULL dereference (not scored)
- [GSD-2022-1005637](https://insights.sbomify.com/GSD-2022-1005637/): i2c: Fix a potential use after free (not scored)
- [GSD-2022-1005636](https://insights.sbomify.com/GSD-2022-1005636/): media: tw686x: Register the irq at the end of probe (not scored)
- [GSD-2022-1005635](https://insights.sbomify.com/GSD-2022-1005635/): wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (not scored)
- [GSD-2022-1005634](https://insights.sbomify.com/GSD-2022-1005634/): ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (not scored)
- [GSD-2022-1005633](https://insights.sbomify.com/GSD-2022-1005633/): media: imx-jpeg: Align upwards buffer size (not scored)
- [GSD-2022-1005632](https://insights.sbomify.com/GSD-2022-1005632/): rcutorture: Fix ksoftirqd boosting timing and iteration (not scored)
- [GSD-2022-1005631](https://insights.sbomify.com/GSD-2022-1005631/): drm/mcde: Fix refcount leak in mcde_dsi_bind (not scored)
- [GSD-2022-1005630](https://insights.sbomify.com/GSD-2022-1005630/): net: hinic: avoid kernel hung in hinic_get_stats64() (not scored)
- [GSD-2022-1005629](https://insights.sbomify.com/GSD-2022-1005629/): media: tw686x: Fix memory leak in tw686x_video_init (not scored)
- [GSD-2022-1005628](https://insights.sbomify.com/GSD-2022-1005628/): drm/msm/mdp5: Fix global state lock backoff (not scored)
- [GSD-2022-1005627](https://insights.sbomify.com/GSD-2022-1005627/): crypto: hisilicon/sec - don't sleep when in softirq (not scored)
- [GSD-2022-1005626](https://insights.sbomify.com/GSD-2022-1005626/): mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (not scored)
- [GSD-2022-1005625](https://insights.sbomify.com/GSD-2022-1005625/): wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (not scored)
- [GSD-2022-1005624](https://insights.sbomify.com/GSD-2022-1005624/): selftests/bpf: fix a test for snprintf() overflow (not scored)
- [GSD-2022-1005623](https://insights.sbomify.com/GSD-2022-1005623/): libbpf: fix an snprintf() overflow check (not scored)
- [GSD-2022-1005622](https://insights.sbomify.com/GSD-2022-1005622/): i2c: cadence: Support PEC for SMBus block read (not scored)
- [GSD-2022-1005621](https://insights.sbomify.com/GSD-2022-1005621/): wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (not scored)
- [GSD-2022-1005620](https://insights.sbomify.com/GSD-2022-1005620/): wifi: libertas: Fix possible refcount leak in if_usb_probe() (not scored)
- [GSD-2022-1005619](https://insights.sbomify.com/GSD-2022-1005619/): wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (not scored)
- [GSD-2022-1005618](https://insights.sbomify.com/GSD-2022-1005618/): netdevsim: fib: Fix reference count leak on route deletion failure (not scored)
- [GSD-2022-1005617](https://insights.sbomify.com/GSD-2022-1005617/): netdevsim: Avoid allocation warnings triggered from user space (not scored)
- [GSD-2022-1005616](https://insights.sbomify.com/GSD-2022-1005616/): mtd: maps: Fix refcount leak in of_flash_probe_versatile (not scored)
- [GSD-2022-1005615](https://insights.sbomify.com/GSD-2022-1005615/): wireguard: allowedips: don't corrupt stack when detecting overflow (not scored)
- [GSD-2022-1005614](https://insights.sbomify.com/GSD-2022-1005614/): mtd: maps: Fix refcount leak in ap_flash_init (not scored)
- [GSD-2022-1005613](https://insights.sbomify.com/GSD-2022-1005613/): PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/110/