# Vulnerabilities published in 2022


- [GSD-2022-1002198](https://insights.sbomify.com/GSD-2022-1002198/): iommu/arm-smmu-v3: fix event handling soft lockup (not scored)
- [GSD-2022-1002197](https://insights.sbomify.com/GSD-2022-1002197/): dm ioctl: prevent potential spectre v1 gadget (not scored)
- [GSD-2022-1002196](https://insights.sbomify.com/GSD-2022-1002196/): netlabel: fix out-of-bounds memory accesses (not scored)
- [GSD-2022-1002195](https://insights.sbomify.com/GSD-2022-1002195/): mips: ralink: fix a refcount leak in ill_acc_of_setup() (not scored)
- [GSD-2022-1002194](https://insights.sbomify.com/GSD-2022-1002194/): MIPS: fix fortify panic when copying asm exception handlers (not scored)
- [GSD-2022-1002193](https://insights.sbomify.com/GSD-2022-1002193/): scsi: libfc: Fix use after free in fc_exch_abts_resp() (not scored)
- [GSD-2022-1002192](https://insights.sbomify.com/GSD-2022-1002192/): Bluetooth: Fix use after free in hci_send_acl (not scored)
- [GSD-2022-1002191](https://insights.sbomify.com/GSD-2022-1002191/): xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (not scored)
- [GSD-2022-1002190](https://insights.sbomify.com/GSD-2022-1002190/): drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (not scored)
- [GSD-2022-1002189](https://insights.sbomify.com/GSD-2022-1002189/): scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (not scored)
- [GSD-2022-1002188](https://insights.sbomify.com/GSD-2022-1002188/): Drivers: hv: vmbus: Fix potential crash on module unload (not scored)
- [GSD-2022-1002187](https://insights.sbomify.com/GSD-2022-1002187/): net/tls: fix slab-out-of-bounds bug in decrypt_internal (not scored)
- [GSD-2022-1002186](https://insights.sbomify.com/GSD-2022-1002186/): jfs: prevent NULL deref in diFree (not scored)
- [GSD-2022-1002185](https://insights.sbomify.com/GSD-2022-1002185/): virtio_console: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2022-1002184](https://insights.sbomify.com/GSD-2022-1002184/): net: ipv4: fix route with nexthop object delete warning (not scored)
- [GSD-2022-1002183](https://insights.sbomify.com/GSD-2022-1002183/): drm/imx: Fix memory leak in imx_pd_connector_get_modes (not scored)
- [GSD-2022-1002182](https://insights.sbomify.com/GSD-2022-1002182/): qede: confirm skb is allocated before using (not scored)
- [GSD-2022-1002181](https://insights.sbomify.com/GSD-2022-1002181/): dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (not scored)
- [GSD-2022-1002180](https://insights.sbomify.com/GSD-2022-1002180/): IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (not scored)
- [GSD-2022-1002179](https://insights.sbomify.com/GSD-2022-1002179/): drbd: Fix five use after free bugs in get_initial_state (not scored)
- [GSD-2022-1002178](https://insights.sbomify.com/GSD-2022-1002178/): rxrpc: fix a race in rxrpc_exit_net() (not scored)
- [GSD-2022-1002177](https://insights.sbomify.com/GSD-2022-1002177/): mm/mempolicy: fix mpol_new leak in shared_policy_replace (not scored)
- [GSD-2022-1002176](https://insights.sbomify.com/GSD-2022-1002176/): ata: sata_dwc_460ex: Fix crash due to OOB write (not scored)
- [GSD-2022-1002175](https://insights.sbomify.com/GSD-2022-1002175/): irqchip/gic-v3: Fix GICR_CTLR.RWP polling (not scored)
- [GSD-2022-1002174](https://insights.sbomify.com/GSD-2022-1002174/): mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (not scored)
- [GSD-2022-1002173](https://insights.sbomify.com/GSD-2022-1002173/): lz4: fix LZ4_decompress_safe_partial read out of bound (not scored)
- [GSD-2022-1002172](https://insights.sbomify.com/GSD-2022-1002172/): mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (not scored)
- [GSD-2022-1002171](https://insights.sbomify.com/GSD-2022-1002171/): btrfs: fix qgroup reserve overflow the qgroup limit (not scored)
- [GSD-2022-1002170](https://insights.sbomify.com/GSD-2022-1002170/): powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (not scored)
- [GSD-2022-1002169](https://insights.sbomify.com/GSD-2022-1002169/): veth: Ensure eth header is in skb's linear part (not scored)
- [GSD-2022-1002168](https://insights.sbomify.com/GSD-2022-1002168/): gpiolib: acpi: use correct format characters (not scored)
- [GSD-2022-1002167](https://insights.sbomify.com/GSD-2022-1002167/): net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (not scored)
- [GSD-2022-1002166](https://insights.sbomify.com/GSD-2022-1002166/): net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (not scored)
- [GSD-2022-1002165](https://insights.sbomify.com/GSD-2022-1002165/): nfc: nci: add flush_workqueue to prevent uaf (not scored)
- [GSD-2022-1002164](https://insights.sbomify.com/GSD-2022-1002164/): cifs: potential buffer overflow in handling symlinks (not scored)
- [GSD-2022-1002163](https://insights.sbomify.com/GSD-2022-1002163/): drm/amdkfd: Check for potential null return of kmalloc_array() (not scored)
- [GSD-2022-1002162](https://insights.sbomify.com/GSD-2022-1002162/): scsi: target: tcmu: Fix possible page UAF (not scored)
- [GSD-2022-1002161](https://insights.sbomify.com/GSD-2022-1002161/): net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (not scored)
- [GSD-2022-1002160](https://insights.sbomify.com/GSD-2022-1002160/): drivers: net: slip: fix NPD bug in sl_tx_timeout() (not scored)
- [GSD-2022-1002159](https://insights.sbomify.com/GSD-2022-1002159/): ARM: davinci: da850-evm: Avoid NULL pointer dereference (not scored)
- [GSD-2022-1002158](https://insights.sbomify.com/GSD-2022-1002158/): gcc-plugins: latent_entropy: use /dev/urandom (not scored)
- [GSD-2022-1002157](https://insights.sbomify.com/GSD-2022-1002157/): ipv6: fix panic when forwarding a pkt with no in6 dev (not scored)
- [GSD-2022-1002156](https://insights.sbomify.com/GSD-2022-1002156/): perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (not scored)
- [GSD-2022-1002155](https://insights.sbomify.com/GSD-2022-1002155/): ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (not scored)
- [GSD-2022-1002154](https://insights.sbomify.com/GSD-2022-1002154/): dm integrity: fix memory corruption when tag_size is less than digest size (not scored)
- [GSD-2022-1002153](https://insights.sbomify.com/GSD-2022-1002153/): ax25: Fix UAF bugs in ax25 timers (not scored)
- [GSD-2022-1002152](https://insights.sbomify.com/GSD-2022-1002152/): ALSA: oss: Fix PCM OSS buffer allocation overflow (not scored)
- [GSD-2022-1002151](https://insights.sbomify.com/GSD-2022-1002151/): ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (not scored)
- [GSD-2022-1002150](https://insights.sbomify.com/GSD-2022-1002150/): netfilter: nf_tables: initialize registers in nft_do_chain() (not scored)
- [GSD-2022-1002149](https://insights.sbomify.com/GSD-2022-1002149/): mac80211: fix potential double free on mesh join (not scored)
- [GSD-2022-1002148](https://insights.sbomify.com/GSD-2022-1002148/): llc: only change llc->dev when bind() succeeds (not scored)
- [GSD-2022-1002147](https://insights.sbomify.com/GSD-2022-1002147/): locking/lockdep: Avoid potential access of invalid memory in lock_class (not scored)
- [GSD-2022-1002146](https://insights.sbomify.com/GSD-2022-1002146/): ALSA: pcm: Fix races among concurrent prealloc proc writes (not scored)
- [GSD-2022-1002145](https://insights.sbomify.com/GSD-2022-1002145/): tpm: fix reference counting for struct tpm_chip (not scored)
- [GSD-2022-1002144](https://insights.sbomify.com/GSD-2022-1002144/): tpm: use try_get_ops() in tpm-space.c (not scored)
- [GSD-2022-1002143](https://insights.sbomify.com/GSD-2022-1002143/): remoteproc: Fix count check in rproc_coredump_write() (not scored)
- [GSD-2022-1002142](https://insights.sbomify.com/GSD-2022-1002142/): pinctrl: samsung: drop pin banks references on error paths (not scored)
- [GSD-2022-1002141](https://insights.sbomify.com/GSD-2022-1002141/): f2fs: quota: fix loop condition at f2fs_quota_sync() (not scored)
- [GSD-2022-1002140](https://insights.sbomify.com/GSD-2022-1002140/): NFSD: prevent integer overflow on 32 bit systems (not scored)
- [GSD-2022-1002139](https://insights.sbomify.com/GSD-2022-1002139/): NFSD: prevent underflow in nfssvc_decode_writeargs() (not scored)
- [GSD-2022-1002138](https://insights.sbomify.com/GSD-2022-1002138/): jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (not scored)
- [GSD-2022-1002137](https://insights.sbomify.com/GSD-2022-1002137/): can: m_can: m_can_tx_handler(): fix use after free of skb (not scored)
- [GSD-2022-1002136](https://insights.sbomify.com/GSD-2022-1002136/): jffs2: fix memory leak in jffs2_scan_medium (not scored)
- [GSD-2022-1002135](https://insights.sbomify.com/GSD-2022-1002135/): jffs2: fix memory leak in jffs2_do_mount_fs (not scored)
- [GSD-2022-1002134](https://insights.sbomify.com/GSD-2022-1002134/): mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (not scored)
- [GSD-2022-1002133](https://insights.sbomify.com/GSD-2022-1002133/): riscv: Increase stack size under KASAN (not scored)
- [GSD-2022-1002132](https://insights.sbomify.com/GSD-2022-1002132/): ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (not scored)
- [GSD-2022-1002131](https://insights.sbomify.com/GSD-2022-1002131/): mm: invalidate hwpoison page cache page in fault path (not scored)
- [GSD-2022-1002130](https://insights.sbomify.com/GSD-2022-1002130/): cifs: prevent bad output lengths in smb2_ioctl_query_info() (not scored)
- [GSD-2022-1002129](https://insights.sbomify.com/GSD-2022-1002129/): mm,hwpoison: unmap poisoned page before invalidation (not scored)
- [GSD-2022-1002128](https://insights.sbomify.com/GSD-2022-1002128/): ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (not scored)
- [GSD-2022-1002127](https://insights.sbomify.com/GSD-2022-1002127/): can: isotp: sanitize CAN ID checks in isotp_bind() (not scored)
- [GSD-2022-1002126](https://insights.sbomify.com/GSD-2022-1002126/): cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (not scored)
- [GSD-2022-1002125](https://insights.sbomify.com/GSD-2022-1002125/): mm/kmemleak: reset tag when compare object pointer (not scored)
- [GSD-2022-1002124](https://insights.sbomify.com/GSD-2022-1002124/): drbd: fix potential silent data corruption (not scored)
- [GSD-2022-1002123](https://insights.sbomify.com/GSD-2022-1002123/): ext4: fix fs corruption when tring to remove a non-empty directory with IO error (not scored)
- [GSD-2022-1002122](https://insights.sbomify.com/GSD-2022-1002122/): brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path (not scored)
- [GSD-2022-1002121](https://insights.sbomify.com/GSD-2022-1002121/): drm/i915/gem: add missing boundary check in vm_access (not scored)
- [GSD-2022-1002120](https://insights.sbomify.com/GSD-2022-1002120/): block: don't delete queue kobject before its children (not scored)
- [GSD-2022-1002119](https://insights.sbomify.com/GSD-2022-1002119/): video: fbdev: sm712fb: Fix crash in smtcfb_read() (not scored)
- [GSD-2022-1002118](https://insights.sbomify.com/GSD-2022-1002118/): exec: Force single empty string when argv is empty (not scored)
- [GSD-2022-1002117](https://insights.sbomify.com/GSD-2022-1002117/): clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts (not scored)
- [GSD-2022-1002116](https://insights.sbomify.com/GSD-2022-1002116/): crypto: ccree - Fix use after free in cc_cipher_exit() (not scored)
- [GSD-2022-1002115](https://insights.sbomify.com/GSD-2022-1002115/): f2fs: fix missing free nid in f2fs_handle_failed_inode (not scored)
- [GSD-2022-1002114](https://insights.sbomify.com/GSD-2022-1002114/): watch_queue: Actually free the watch (not scored)
- [GSD-2022-1002113](https://insights.sbomify.com/GSD-2022-1002113/): f2fs: fix compressed file start atomic write may cause data corruption (not scored)
- [GSD-2022-1002112](https://insights.sbomify.com/GSD-2022-1002112/): ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting (not scored)
- [GSD-2022-1002111](https://insights.sbomify.com/GSD-2022-1002111/): watch_queue: Fix NULL dereference in error cleanup (not scored)
- [GSD-2022-1002110](https://insights.sbomify.com/GSD-2022-1002110/): video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (not scored)
- [GSD-2022-1002109](https://insights.sbomify.com/GSD-2022-1002109/): soc: qcom: rpmpd: Check for null return of devm_kcalloc (not scored)
- [GSD-2022-1002108](https://insights.sbomify.com/GSD-2022-1002108/): media: usb: go7007: s2250-board: fix leak in probe() (not scored)
- [GSD-2022-1002107](https://insights.sbomify.com/GSD-2022-1002107/): ASoC: soc-compress: prevent the potentially use of null pointer (not scored)
- [GSD-2022-1002106](https://insights.sbomify.com/GSD-2022-1002106/): ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (not scored)
- [GSD-2022-1002105](https://insights.sbomify.com/GSD-2022-1002105/): media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (not scored)
- [GSD-2022-1002104](https://insights.sbomify.com/GSD-2022-1002104/): ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (not scored)
- [GSD-2022-1002103](https://insights.sbomify.com/GSD-2022-1002103/): ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (not scored)
- [GSD-2022-1002102](https://insights.sbomify.com/GSD-2022-1002102/): ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (not scored)
- [GSD-2022-1002101](https://insights.sbomify.com/GSD-2022-1002101/): ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data (not scored)
- [GSD-2022-1002100](https://insights.sbomify.com/GSD-2022-1002100/): udmabuf: validate ubuf->pagecount (not scored)
- [GSD-2022-1002099](https://insights.sbomify.com/GSD-2022-1002099/): libbpf: Fix possible NULL pointer dereference when destroying skeleton (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/145/