# Vulnerabilities published in 2022


- [GSD-2022-1004108](https://insights.sbomify.com/GSD-2022-1004108/): ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. (not scored)
- [GSD-2022-1004107](https://insights.sbomify.com/GSD-2022-1004107/): tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (not scored)
- [GSD-2022-1004106](https://insights.sbomify.com/GSD-2022-1004106/): tcp: Fix data-races around sysctl_tcp_recovery. (not scored)
- [GSD-2022-1004105](https://insights.sbomify.com/GSD-2022-1004105/): tcp: Fix a data-race around sysctl_tcp_early_retrans. (not scored)
- [GSD-2022-1004104](https://insights.sbomify.com/GSD-2022-1004104/): tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (not scored)
- [GSD-2022-1004103](https://insights.sbomify.com/GSD-2022-1004103/): tcp: Fix data-races around sysctl_tcp_max_reordering. (not scored)
- [GSD-2022-1004102](https://insights.sbomify.com/GSD-2022-1004102/): gpio: gpio-xilinx: Fix integer overflow (not scored)
- [GSD-2022-1004101](https://insights.sbomify.com/GSD-2022-1004101/): spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (not scored)
- [GSD-2022-1004100](https://insights.sbomify.com/GSD-2022-1004100/): KVM: Don't null dereference ops->destroy (not scored)
- [GSD-2022-1004099](https://insights.sbomify.com/GSD-2022-1004099/): mm/mempolicy: fix uninit-value in mpol_rebind_policy() (not scored)
- [GSD-2022-1004098](https://insights.sbomify.com/GSD-2022-1004098/): crypto: qat - fix memory leak in RSA (not scored)
- [GSD-2022-1004097](https://insights.sbomify.com/GSD-2022-1004097/): perf/x86/intel/lbr: Fix unchecked MSR access error on HSW (not scored)
- [GSD-2022-1004096](https://insights.sbomify.com/GSD-2022-1004096/): crypto: qat - add param check for DH (not scored)
- [GSD-2022-1004095](https://insights.sbomify.com/GSD-2022-1004095/): crypto: qat - add param check for RSA (not scored)
- [GSD-2022-1004093](https://insights.sbomify.com/GSD-2022-1004093/): netfilter: nf_tables: disallow non-stateful expression in sets earlier (not scored)
- [GSD-2022-1004092](https://insights.sbomify.com/GSD-2022-1004092/): ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe (not scored)
- [GSD-2022-1004091](https://insights.sbomify.com/GSD-2022-1004091/): drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (not scored)
- [GSD-2022-1004090](https://insights.sbomify.com/GSD-2022-1004090/): x86/delay: Fix the wrong asm constraint in delay_loop() (not scored)
- [GSD-2022-1004089](https://insights.sbomify.com/GSD-2022-1004089/): dm stats: add cond_resched when looping over entries (not scored)
- [GSD-2022-1004088](https://insights.sbomify.com/GSD-2022-1004088/): dm crypt: make printing of the key constant-time (not scored)
- [GSD-2022-1004087](https://insights.sbomify.com/GSD-2022-1004087/): x86/pm: Fix false positive kmemleak report in msr_build_context() (not scored)
- [GSD-2022-1004086](https://insights.sbomify.com/GSD-2022-1004086/): drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (not scored)
- [GSD-2022-1004085](https://insights.sbomify.com/GSD-2022-1004085/): ipw2x00: Fix potential NULL dereference in libipw_xmit() (not scored)
- [GSD-2022-1004084](https://insights.sbomify.com/GSD-2022-1004084/): NFC: NULL out the dev->rfkill to prevent UAF (not scored)
- [GSD-2022-1004083](https://insights.sbomify.com/GSD-2022-1004083/): drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (not scored)
- [GSD-2022-1004082](https://insights.sbomify.com/GSD-2022-1004082/): ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix (not scored)
- [GSD-2022-1004081](https://insights.sbomify.com/GSD-2022-1004081/): drm/amd/pm: fix double free in si_parse_power_table() (not scored)
- [GSD-2022-1004080](https://insights.sbomify.com/GSD-2022-1004080/): ALSA: jack: Access input_dev under mutex (not scored)
- [GSD-2022-1004079](https://insights.sbomify.com/GSD-2022-1004079/): regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt (not scored)
- [GSD-2022-1004078](https://insights.sbomify.com/GSD-2022-1004078/): drm/msm/hdmi: check return value after calling platform_get_resource_byname() (not scored)
- [GSD-2022-1004077](https://insights.sbomify.com/GSD-2022-1004077/): ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (not scored)
- [GSD-2022-1004076](https://insights.sbomify.com/GSD-2022-1004076/): Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (not scored)
- [GSD-2022-1004075](https://insights.sbomify.com/GSD-2022-1004075/): media: cx25821: Fix the warning when removing the module (not scored)
- [GSD-2022-1004074](https://insights.sbomify.com/GSD-2022-1004074/): scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() (not scored)
- [GSD-2022-1004073](https://insights.sbomify.com/GSD-2022-1004073/): media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (not scored)
- [GSD-2022-1004072](https://insights.sbomify.com/GSD-2022-1004072/): ASoC: rt5645: Fix errorenous cleanup order (not scored)
- [GSD-2022-1004071](https://insights.sbomify.com/GSD-2022-1004071/): nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (not scored)
- [GSD-2022-1004070](https://insights.sbomify.com/GSD-2022-1004070/): ARM: versatile: Add missing of_node_put in dcscb_init (not scored)
- [GSD-2022-1004069](https://insights.sbomify.com/GSD-2022-1004069/): fs: jfs: fix possible NULL pointer dereference in dbFree() (not scored)
- [GSD-2022-1004068](https://insights.sbomify.com/GSD-2022-1004068/): Input: sparcspkr - fix refcount leak in bbc_beep_probe (not scored)
- [GSD-2022-1004067](https://insights.sbomify.com/GSD-2022-1004067/): drivers/base/node.c: fix compaction sysfs file leak (not scored)
- [GSD-2022-1004066](https://insights.sbomify.com/GSD-2022-1004066/): rxrpc: Fix listen() setting the bar too high for the prealloc rings (not scored)
- [GSD-2022-1004065](https://insights.sbomify.com/GSD-2022-1004065/): eth: tg3: silence the GCC 12 array-bounds warning (not scored)
- [GSD-2022-1004064](https://insights.sbomify.com/GSD-2022-1004064/): PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (not scored)
- [GSD-2022-1004063](https://insights.sbomify.com/GSD-2022-1004063/): powerpc/xics: fix refcount leak in icp_opal_init() (not scored)
- [GSD-2022-1004062](https://insights.sbomify.com/GSD-2022-1004062/): tty: fix deadlock caused by calling printk() under tty_port->lock (not scored)
- [GSD-2022-1004061](https://insights.sbomify.com/GSD-2022-1004061/): ARM: hisi: Add missing of_node_put after of_find_compatible_node (not scored)
- [GSD-2022-1004060](https://insights.sbomify.com/GSD-2022-1004060/): video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup (not scored)
- [GSD-2022-1004059](https://insights.sbomify.com/GSD-2022-1004059/): wifi: mac80211: fix use-after-free in chanctx code (not scored)
- [GSD-2022-1004058](https://insights.sbomify.com/GSD-2022-1004058/): dlm: fix plock invalid read (not scored)
- [GSD-2022-1004057](https://insights.sbomify.com/GSD-2022-1004057/): RDMA/hfi1: Fix potential integer multiplication overflow errors (not scored)
- [GSD-2022-1004056](https://insights.sbomify.com/GSD-2022-1004056/): um: Fix out-of-bounds read in LDT setup (not scored)
- [GSD-2022-1004055](https://insights.sbomify.com/GSD-2022-1004055/): usb: usbip: fix a refcount leak in stub_probe() (not scored)
- [GSD-2022-1004054](https://insights.sbomify.com/GSD-2022-1004054/): irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x (not scored)
- [GSD-2022-1004053](https://insights.sbomify.com/GSD-2022-1004053/): net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() (not scored)
- [GSD-2022-1004052](https://insights.sbomify.com/GSD-2022-1004052/): rtc: mt6397: check return value after calling platform_get_resource() (not scored)
- [GSD-2022-1004051](https://insights.sbomify.com/GSD-2022-1004051/): firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle (not scored)
- [GSD-2022-1004050](https://insights.sbomify.com/GSD-2022-1004050/): jffs2: fix memory leak in jffs2_do_fill_super (not scored)
- [GSD-2022-1004049](https://insights.sbomify.com/GSD-2022-1004049/): tcp: tcp_rtx_synack() can be called from process context (not scored)
- [GSD-2022-1004048](https://insights.sbomify.com/GSD-2022-1004048/): fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages (not scored)
- [GSD-2022-1004047](https://insights.sbomify.com/GSD-2022-1004047/): ext4: fix use-after-free in ext4_rename_dir_prepare (not scored)
- [GSD-2022-1004046](https://insights.sbomify.com/GSD-2022-1004046/): ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe (not scored)
- [GSD-2022-1004045](https://insights.sbomify.com/GSD-2022-1004045/): ext4: fix bug_on in ext4_writepages (not scored)
- [GSD-2022-1004044](https://insights.sbomify.com/GSD-2022-1004044/): net: altera: Fix refcount leak in altera_tse_mdio_create (not scored)
- [GSD-2022-1004043](https://insights.sbomify.com/GSD-2022-1004043/): drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. (not scored)
- [GSD-2022-1004042](https://insights.sbomify.com/GSD-2022-1004042/): ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (not scored)
- [GSD-2022-1004041](https://insights.sbomify.com/GSD-2022-1004041/): net: xfrm: unexport __init-annotated xfrm4_protocol_init() (not scored)
- [GSD-2022-1004040](https://insights.sbomify.com/GSD-2022-1004040/): rtl818x: Prevent using not initialized queues (not scored)
- [GSD-2022-1004039](https://insights.sbomify.com/GSD-2022-1004039/): tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (not scored)
- [GSD-2022-1004038](https://insights.sbomify.com/GSD-2022-1004038/): nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (not scored)
- [GSD-2022-1004037](https://insights.sbomify.com/GSD-2022-1004037/): video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() (not scored)
- [GSD-2022-1004036](https://insights.sbomify.com/GSD-2022-1004036/): tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (not scored)
- [GSD-2022-1004035](https://insights.sbomify.com/GSD-2022-1004035/): iio: dummy: iio_simple_dummy: check the return value of kstrdup() (not scored)
- [GSD-2022-1004034](https://insights.sbomify.com/GSD-2022-1004034/): drivers: tty: serial: Fix deadlock in sa1100_set_termios() (not scored)
- [GSD-2022-1004033](https://insights.sbomify.com/GSD-2022-1004033/): USB: host: isp116x: check return value after calling platform_get_resource() (not scored)
- [GSD-2022-1004032](https://insights.sbomify.com/GSD-2022-1004032/): tty: Fix a possible resource leak in icom_probe (not scored)
- [GSD-2022-1004031](https://insights.sbomify.com/GSD-2022-1004031/): drivers: usb: host: Fix deadlock in oxu_bus_suspend() (not scored)
- [GSD-2022-1004030](https://insights.sbomify.com/GSD-2022-1004030/): usb: dwc2: gadget: don't reset gadget's driver->bus (not scored)
- [GSD-2022-1004029](https://insights.sbomify.com/GSD-2022-1004029/): staging: rtl8712: fix uninit-value in r871xu_drv_init() (not scored)
- [GSD-2022-1004028](https://insights.sbomify.com/GSD-2022-1004028/): drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (not scored)
- [GSD-2022-1004027](https://insights.sbomify.com/GSD-2022-1004027/): drm/radeon: fix a possible null pointer dereference (not scored)
- [GSD-2022-1004026](https://insights.sbomify.com/GSD-2022-1004026/): x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (not scored)
- [GSD-2022-1004025](https://insights.sbomify.com/GSD-2022-1004025/): netfilter: conntrack: re-fetch conntrack after insertion (not scored)
- [GSD-2022-1004024](https://insights.sbomify.com/GSD-2022-1004024/): netfilter: nf_tables: disallow non-stateful expression in sets earlier (not scored)
- [GSD-2022-1004023](https://insights.sbomify.com/GSD-2022-1004023/): zsmalloc: fix races between asynchronous zspage free and page migration (not scored)
- [GSD-2022-1004022](https://insights.sbomify.com/GSD-2022-1004022/): x86/delay: Fix the wrong asm constraint in delay_loop() (not scored)
- [GSD-2022-1004021](https://insights.sbomify.com/GSD-2022-1004021/): ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe (not scored)
- [GSD-2022-1004020](https://insights.sbomify.com/GSD-2022-1004020/): NFC: NULL out the dev->rfkill to prevent UAF (not scored)
- [GSD-2022-1004019](https://insights.sbomify.com/GSD-2022-1004019/): ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe (not scored)
- [GSD-2022-1004018](https://insights.sbomify.com/GSD-2022-1004018/): x86/pm: Fix false positive kmemleak report in msr_build_context() (not scored)
- [GSD-2022-1004017](https://insights.sbomify.com/GSD-2022-1004017/): ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix (not scored)
- [GSD-2022-1004016](https://insights.sbomify.com/GSD-2022-1004016/): fsnotify: fix wrong lockdep annotations (not scored)
- [GSD-2022-1004015](https://insights.sbomify.com/GSD-2022-1004015/): drm/msm/hdmi: check return value after calling platform_get_resource_byname() (not scored)
- [GSD-2022-1004014](https://insights.sbomify.com/GSD-2022-1004014/): drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (not scored)
- [GSD-2022-1004013](https://insights.sbomify.com/GSD-2022-1004013/): regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt (not scored)
- [GSD-2022-1004012](https://insights.sbomify.com/GSD-2022-1004012/): ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (not scored)
- [GSD-2022-1004011](https://insights.sbomify.com/GSD-2022-1004011/): drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (not scored)
- [GSD-2022-1004010](https://insights.sbomify.com/GSD-2022-1004010/): media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (not scored)
- [GSD-2022-1004009](https://insights.sbomify.com/GSD-2022-1004009/): Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (not scored)
- [GSD-2022-1004008](https://insights.sbomify.com/GSD-2022-1004008/): dm stats: add cond_resched when looping over entries (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/126/