# Vulnerabilities published in 2022


- [GSD-2022-1002398](https://insights.sbomify.com/GSD-2022-1002398/): drbd: Fix five use after free bugs in get_initial_state (not scored)
- [GSD-2022-1002397](https://insights.sbomify.com/GSD-2022-1002397/): mm/mempolicy: fix mpol_new leak in shared_policy_replace (not scored)
- [GSD-2022-1002396](https://insights.sbomify.com/GSD-2022-1002396/): mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (not scored)
- [GSD-2022-1002395](https://insights.sbomify.com/GSD-2022-1002395/): btrfs: fix qgroup reserve overflow the qgroup limit (not scored)
- [GSD-2022-1002394](https://insights.sbomify.com/GSD-2022-1002394/): mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (not scored)
- [GSD-2022-1002393](https://insights.sbomify.com/GSD-2022-1002393/): veth: Ensure eth header is in skb's linear part (not scored)
- [GSD-2022-1002392](https://insights.sbomify.com/GSD-2022-1002392/): gpiolib: acpi: use correct format characters (not scored)
- [GSD-2022-1002391](https://insights.sbomify.com/GSD-2022-1002391/): net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (not scored)
- [GSD-2022-1002390](https://insights.sbomify.com/GSD-2022-1002390/): cifs: potential buffer overflow in handling symlinks (not scored)
- [GSD-2022-1002389](https://insights.sbomify.com/GSD-2022-1002389/): nfc: nci: add flush_workqueue to prevent uaf (not scored)
- [GSD-2022-1002388](https://insights.sbomify.com/GSD-2022-1002388/): ARM: davinci: da850-evm: Avoid NULL pointer dereference (not scored)
- [GSD-2022-1002387](https://insights.sbomify.com/GSD-2022-1002387/): gcc-plugins: latent_entropy: use /dev/urandom (not scored)
- [GSD-2022-1002386](https://insights.sbomify.com/GSD-2022-1002386/): drm/amdkfd: Check for potential null return of kmalloc_array() (not scored)
- [GSD-2022-1002385](https://insights.sbomify.com/GSD-2022-1002385/): scsi: target: tcmu: Fix possible page UAF (not scored)
- [GSD-2022-1002384](https://insights.sbomify.com/GSD-2022-1002384/): drivers: net: slip: fix NPD bug in sl_tx_timeout() (not scored)
- [GSD-2022-1002383](https://insights.sbomify.com/GSD-2022-1002383/): ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (not scored)
- [GSD-2022-1002382](https://insights.sbomify.com/GSD-2022-1002382/): netfilter: nf_tables: initialize registers in nft_do_chain() (not scored)
- [GSD-2022-1002381](https://insights.sbomify.com/GSD-2022-1002381/): tpm: fix reference counting for struct tpm_chip (not scored)
- [GSD-2022-1002380](https://insights.sbomify.com/GSD-2022-1002380/): llc: only change llc->dev when bind() succeeds (not scored)
- [GSD-2022-1002379](https://insights.sbomify.com/GSD-2022-1002379/): mac80211: fix potential double free on mesh join (not scored)
- [GSD-2022-1002378](https://insights.sbomify.com/GSD-2022-1002378/): ALSA: oss: Fix PCM OSS buffer allocation overflow (not scored)
- [GSD-2022-1002377](https://insights.sbomify.com/GSD-2022-1002377/): pinctrl: samsung: drop pin banks references on error paths (not scored)
- [GSD-2022-1002376](https://insights.sbomify.com/GSD-2022-1002376/): NFSD: prevent integer overflow on 32 bit systems (not scored)
- [GSD-2022-1002375](https://insights.sbomify.com/GSD-2022-1002375/): NFSD: prevent underflow in nfssvc_decode_writeargs() (not scored)
- [GSD-2022-1002374](https://insights.sbomify.com/GSD-2022-1002374/): jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (not scored)
- [GSD-2022-1002373](https://insights.sbomify.com/GSD-2022-1002373/): jffs2: fix memory leak in jffs2_do_mount_fs (not scored)
- [GSD-2022-1002372](https://insights.sbomify.com/GSD-2022-1002372/): jffs2: fix memory leak in jffs2_scan_medium (not scored)
- [GSD-2022-1002371](https://insights.sbomify.com/GSD-2022-1002371/): mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (not scored)
- [GSD-2022-1002370](https://insights.sbomify.com/GSD-2022-1002370/): mm,hwpoison: unmap poisoned page before invalidation (not scored)
- [GSD-2022-1002369](https://insights.sbomify.com/GSD-2022-1002369/): mm: invalidate hwpoison page cache page in fault path (not scored)
- [GSD-2022-1002368](https://insights.sbomify.com/GSD-2022-1002368/): block: don't delete queue kobject before its children (not scored)
- [GSD-2022-1002367](https://insights.sbomify.com/GSD-2022-1002367/): drbd: fix potential silent data corruption (not scored)
- [GSD-2022-1002366](https://insights.sbomify.com/GSD-2022-1002366/): video: fbdev: sm712fb: Fix crash in smtcfb_read() (not scored)
- [GSD-2022-1002365](https://insights.sbomify.com/GSD-2022-1002365/): video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (not scored)
- [GSD-2022-1002364](https://insights.sbomify.com/GSD-2022-1002364/): media: usb: go7007: s2250-board: fix leak in probe() (not scored)
- [GSD-2022-1002363](https://insights.sbomify.com/GSD-2022-1002363/): ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (not scored)
- [GSD-2022-1002362](https://insights.sbomify.com/GSD-2022-1002362/): media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (not scored)
- [GSD-2022-1002361](https://insights.sbomify.com/GSD-2022-1002361/): ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (not scored)
- [GSD-2022-1002360](https://insights.sbomify.com/GSD-2022-1002360/): ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (not scored)
- [GSD-2022-1002359](https://insights.sbomify.com/GSD-2022-1002359/): ath9k_htc: fix uninit value bugs (not scored)
- [GSD-2022-1002358](https://insights.sbomify.com/GSD-2022-1002358/): drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (not scored)
- [GSD-2022-1002357](https://insights.sbomify.com/GSD-2022-1002357/): Bluetooth: hci_serdev: call init_rwsem() before p->open() (not scored)
- [GSD-2022-1002356](https://insights.sbomify.com/GSD-2022-1002356/): power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (not scored)
- [GSD-2022-1002355](https://insights.sbomify.com/GSD-2022-1002355/): scsi: pm8001: Fix abort all task initialization (not scored)
- [GSD-2022-1002354](https://insights.sbomify.com/GSD-2022-1002354/): ext2: correct max file size computing (not scored)
- [GSD-2022-1002353](https://insights.sbomify.com/GSD-2022-1002353/): power: supply: wm8350-power: Add missing free in free_charger_irq (not scored)
- [GSD-2022-1002352](https://insights.sbomify.com/GSD-2022-1002352/): drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (not scored)
- [GSD-2022-1002351](https://insights.sbomify.com/GSD-2022-1002351/): PCI: Reduce warnings on possible RW1C corruption (not scored)
- [GSD-2022-1002350](https://insights.sbomify.com/GSD-2022-1002350/): mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (not scored)
- [GSD-2022-1002349](https://insights.sbomify.com/GSD-2022-1002349/): af_netlink: Fix shift out of bounds in group mask calculation (not scored)
- [GSD-2022-1002348](https://insights.sbomify.com/GSD-2022-1002348/): mxser: fix xmit_buf leak in activate when LSR == 0xff (not scored)
- [GSD-2022-1002347](https://insights.sbomify.com/GSD-2022-1002347/): pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (not scored)
- [GSD-2022-1002346](https://insights.sbomify.com/GSD-2022-1002346/): NFS: remove unneeded check in decode_devicenotify_args() (not scored)
- [GSD-2022-1002345](https://insights.sbomify.com/GSD-2022-1002345/): kgdboc: fix return value of __setup handler (not scored)
- [GSD-2022-1002344](https://insights.sbomify.com/GSD-2022-1002344/): xen: fix is_xen_pmu() (not scored)
- [GSD-2022-1002343](https://insights.sbomify.com/GSD-2022-1002343/): net/x25: Fix null-ptr-deref caused by x25_disconnect (not scored)
- [GSD-2022-1002342](https://insights.sbomify.com/GSD-2022-1002342/): lib/test: use after free in register_test_dev_kmod() (not scored)
- [GSD-2022-1002341](https://insights.sbomify.com/GSD-2022-1002341/): bfq: fix use-after-free in bfq_dispatch_request (not scored)
- [GSD-2022-1002340](https://insights.sbomify.com/GSD-2022-1002340/): Revert "Revert "block, bfq: honor already-setup queue merges"" (not scored)
- [GSD-2022-1002339](https://insights.sbomify.com/GSD-2022-1002339/): PM: core: keep irq flags in device_pm_check_callbacks() (not scored)
- [GSD-2022-1002338](https://insights.sbomify.com/GSD-2022-1002338/): ext4: don't BUG if someone dirty pages without asking ext4 first (not scored)
- [GSD-2022-1002337](https://insights.sbomify.com/GSD-2022-1002337/): ntfs: add sanity check on allocation size (not scored)
- [GSD-2022-1002336](https://insights.sbomify.com/GSD-2022-1002336/): video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (not scored)
- [GSD-2022-1002335](https://insights.sbomify.com/GSD-2022-1002335/): video: fbdev: cirrusfb: check pixclock to avoid divide by zero (not scored)
- [GSD-2022-1002334](https://insights.sbomify.com/GSD-2022-1002334/): ARM: mmp: Fix failure to remove sram device (not scored)
- [GSD-2022-1002333](https://insights.sbomify.com/GSD-2022-1002333/): mmc: host: Return an error when ->enable_sdio_irq() ops is missing (not scored)
- [GSD-2022-1002332](https://insights.sbomify.com/GSD-2022-1002332/): video: fbdev: sm712fb: Fix crash in smtcfb_write() (not scored)
- [GSD-2022-1002331](https://insights.sbomify.com/GSD-2022-1002331/): scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (not scored)
- [GSD-2022-1002330](https://insights.sbomify.com/GSD-2022-1002330/): ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (not scored)
- [GSD-2022-1002329](https://insights.sbomify.com/GSD-2022-1002329/): ubifs: rename_whiteout: Fix double free for whiteout_ui->data (not scored)
- [GSD-2022-1002328](https://insights.sbomify.com/GSD-2022-1002328/): ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (not scored)
- [GSD-2022-1002327](https://insights.sbomify.com/GSD-2022-1002327/): can: mcba_usb: properly check endpoint type (not scored)
- [GSD-2022-1002326](https://insights.sbomify.com/GSD-2022-1002326/): ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (not scored)
- [GSD-2022-1002325](https://insights.sbomify.com/GSD-2022-1002325/): ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (not scored)
- [GSD-2022-1002324](https://insights.sbomify.com/GSD-2022-1002324/): KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (not scored)
- [GSD-2022-1002323](https://insights.sbomify.com/GSD-2022-1002323/): ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (not scored)
- [GSD-2022-1002322](https://insights.sbomify.com/GSD-2022-1002322/): drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (not scored)
- [GSD-2022-1002321](https://insights.sbomify.com/GSD-2022-1002321/): iommu/arm-smmu-v3: fix event handling soft lockup (not scored)
- [GSD-2022-1002320](https://insights.sbomify.com/GSD-2022-1002320/): netlabel: fix out-of-bounds memory accesses (not scored)
- [GSD-2022-1002319](https://insights.sbomify.com/GSD-2022-1002319/): dm ioctl: prevent potential spectre v1 gadget (not scored)
- [GSD-2022-1002318](https://insights.sbomify.com/GSD-2022-1002318/): MIPS: fix fortify panic when copying asm exception handlers (not scored)
- [GSD-2022-1002317](https://insights.sbomify.com/GSD-2022-1002317/): scsi: libfc: Fix use after free in fc_exch_abts_resp() (not scored)
- [GSD-2022-1002316](https://insights.sbomify.com/GSD-2022-1002316/): Bluetooth: Fix use after free in hci_send_acl (not scored)
- [GSD-2022-1002315](https://insights.sbomify.com/GSD-2022-1002315/): xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (not scored)
- [GSD-2022-1002314](https://insights.sbomify.com/GSD-2022-1002314/): Drivers: hv: vmbus: Fix potential crash on module unload (not scored)
- [GSD-2022-1002313](https://insights.sbomify.com/GSD-2022-1002313/): drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (not scored)
- [GSD-2022-1002312](https://insights.sbomify.com/GSD-2022-1002312/): scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (not scored)
- [GSD-2022-1002311](https://insights.sbomify.com/GSD-2022-1002311/): jfs: prevent NULL deref in diFree (not scored)
- [GSD-2022-1002310](https://insights.sbomify.com/GSD-2022-1002310/): virtio_console: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2022-1002309](https://insights.sbomify.com/GSD-2022-1002309/): drm/imx: Fix memory leak in imx_pd_connector_get_modes (not scored)
- [GSD-2022-1002308](https://insights.sbomify.com/GSD-2022-1002308/): drbd: Fix five use after free bugs in get_initial_state (not scored)
- [GSD-2022-1002307](https://insights.sbomify.com/GSD-2022-1002307/): qede: confirm skb is allocated before using (not scored)
- [GSD-2022-1002306](https://insights.sbomify.com/GSD-2022-1002306/): rxrpc: fix a race in rxrpc_exit_net() (not scored)
- [GSD-2022-1002305](https://insights.sbomify.com/GSD-2022-1002305/): mm/mempolicy: fix mpol_new leak in shared_policy_replace (not scored)
- [GSD-2022-1002304](https://insights.sbomify.com/GSD-2022-1002304/): ata: sata_dwc_460ex: Fix crash due to OOB write (not scored)
- [GSD-2022-1002303](https://insights.sbomify.com/GSD-2022-1002303/): irqchip/gic-v3: Fix GICR_CTLR.RWP polling (not scored)
- [GSD-2022-1002302](https://insights.sbomify.com/GSD-2022-1002302/): mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (not scored)
- [GSD-2022-1002301](https://insights.sbomify.com/GSD-2022-1002301/): btrfs: fix qgroup reserve overflow the qgroup limit (not scored)
- [GSD-2022-1002300](https://insights.sbomify.com/GSD-2022-1002300/): mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (not scored)
- [GSD-2022-1002299](https://insights.sbomify.com/GSD-2022-1002299/): veth: Ensure eth header is in skb's linear part (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/143/
