# Vulnerabilities published in 2022


- [GSD-2022-1001798](https://insights.sbomify.com/GSD-2022-1001798/): block, bfq: don't move oom_bfqq (not scored)
- [GSD-2022-1001797](https://insights.sbomify.com/GSD-2022-1001797/): selinux: allow FIOCLEX and FIONCLEX with policy capability (not scored)
- [GSD-2022-1001796](https://insights.sbomify.com/GSD-2022-1001796/): bfq: fix use-after-free in bfq_dispatch_request (not scored)
- [GSD-2022-1001795](https://insights.sbomify.com/GSD-2022-1001795/): PM: core: keep irq flags in device_pm_check_callbacks() (not scored)
- [GSD-2022-1001794](https://insights.sbomify.com/GSD-2022-1001794/): Revert "Revert "block, bfq: honor already-setup queue merges"" (not scored)
- [GSD-2022-1001793](https://insights.sbomify.com/GSD-2022-1001793/): ext4: don't BUG if someone dirty pages without asking ext4 first (not scored)
- [GSD-2022-1001792](https://insights.sbomify.com/GSD-2022-1001792/): ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (not scored)
- [GSD-2022-1001791](https://insights.sbomify.com/GSD-2022-1001791/): f2fs: fix to do sanity check on curseg->alloc_type (not scored)
- [GSD-2022-1001790](https://insights.sbomify.com/GSD-2022-1001790/): btrfs: make search_csum_tree return 0 if we get -EFBIG (not scored)
- [GSD-2022-1001789](https://insights.sbomify.com/GSD-2022-1001789/): f2fs: use spin_lock to avoid hang (not scored)
- [GSD-2022-1001788](https://insights.sbomify.com/GSD-2022-1001788/): ntfs: add sanity check on allocation size (not scored)
- [GSD-2022-1001787](https://insights.sbomify.com/GSD-2022-1001787/): media: staging: media: zoran: move videodev alloc (not scored)
- [GSD-2022-1001786](https://insights.sbomify.com/GSD-2022-1001786/): media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (not scored)
- [GSD-2022-1001785](https://insights.sbomify.com/GSD-2022-1001785/): media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (not scored)
- [GSD-2022-1001784](https://insights.sbomify.com/GSD-2022-1001784/): media: ir_toy: free before error exiting (not scored)
- [GSD-2022-1001783](https://insights.sbomify.com/GSD-2022-1001783/): video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (not scored)
- [GSD-2022-1001782](https://insights.sbomify.com/GSD-2022-1001782/): video: fbdev: cirrusfb: check pixclock to avoid divide by zero (not scored)
- [GSD-2022-1001781](https://insights.sbomify.com/GSD-2022-1001781/): media: atomisp: fix dummy_ptr check to avoid duplicate active_bo (not scored)
- [GSD-2022-1001780](https://insights.sbomify.com/GSD-2022-1001780/): media: imx-jpeg: fix a bug of accessing array out of bounds (not scored)
- [GSD-2022-1001779](https://insights.sbomify.com/GSD-2022-1001779/): powerpc/kasan: Fix early region not updated correctly (not scored)
- [GSD-2022-1001778](https://insights.sbomify.com/GSD-2022-1001778/): KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU (not scored)
- [GSD-2022-1001777](https://insights.sbomify.com/GSD-2022-1001777/): drm/dp: Fix off-by-one in register cache size (not scored)
- [GSD-2022-1001776](https://insights.sbomify.com/GSD-2022-1001776/): video: fbdev: sm712fb: Fix crash in smtcfb_write() (not scored)
- [GSD-2022-1001775](https://insights.sbomify.com/GSD-2022-1001775/): ARM: mmp: Fix failure to remove sram device (not scored)
- [GSD-2022-1001774](https://insights.sbomify.com/GSD-2022-1001774/): mmc: host: Return an error when ->enable_sdio_irq() ops is missing (not scored)
- [GSD-2022-1001773](https://insights.sbomify.com/GSD-2022-1001773/): drm/i915: Treat SAGV block time 0 as SAGV disabled (not scored)
- [GSD-2022-1001772](https://insights.sbomify.com/GSD-2022-1001772/): scsi: qla2xxx: Fix warning message due to adisc being flushed (not scored)
- [GSD-2022-1001771](https://insights.sbomify.com/GSD-2022-1001771/): scsi: qla2xxx: Implement ref count for SRB (not scored)
- [GSD-2022-1001770](https://insights.sbomify.com/GSD-2022-1001770/): ubifs: rename_whiteout: Fix double free for whiteout_ui->data (not scored)
- [GSD-2022-1001769](https://insights.sbomify.com/GSD-2022-1001769/): KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (not scored)
- [GSD-2022-1001768](https://insights.sbomify.com/GSD-2022-1001768/): scsi: qla2xxx: Fix scheduling while atomic (not scored)
- [GSD-2022-1001767](https://insights.sbomify.com/GSD-2022-1001767/): scsi: qla2xxx: Fix premature hw access after PCI error (not scored)
- [GSD-2022-1001766](https://insights.sbomify.com/GSD-2022-1001766/): scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (not scored)
- [GSD-2022-1001765](https://insights.sbomify.com/GSD-2022-1001765/): KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (not scored)
- [GSD-2022-1001764](https://insights.sbomify.com/GSD-2022-1001764/): KVM: SVM: fix panic on out-of-bounds guest IRQ (not scored)
- [GSD-2022-1001763](https://insights.sbomify.com/GSD-2022-1001763/): ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (not scored)
- [GSD-2022-1001762](https://insights.sbomify.com/GSD-2022-1001762/): ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (not scored)
- [GSD-2022-1001761](https://insights.sbomify.com/GSD-2022-1001761/): ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (not scored)
- [GSD-2022-1001760](https://insights.sbomify.com/GSD-2022-1001760/): ubifs: Fix to add refcount once page is set private (not scored)
- [GSD-2022-1001759](https://insights.sbomify.com/GSD-2022-1001759/): wireguard: socket: ignore v6 endpoints when ipv6 is disabled (not scored)
- [GSD-2022-1001758](https://insights.sbomify.com/GSD-2022-1001758/): wireguard: socket: free skb in send6 when ipv6 is disabled (not scored)
- [GSD-2022-1001757](https://insights.sbomify.com/GSD-2022-1001757/): can: mcba_usb: properly check endpoint type (not scored)
- [GSD-2022-1001756](https://insights.sbomify.com/GSD-2022-1001756/): rxrpc: fix some null-ptr-deref bugs in server_key.c (not scored)
- [GSD-2022-1001755](https://insights.sbomify.com/GSD-2022-1001755/): watch_queue: Free the page array when watch_queue is dismantled (not scored)
- [GSD-2022-1001754](https://insights.sbomify.com/GSD-2022-1001754/): block: Fix the maximum minor value is blk_alloc_ext_minor() (not scored)
- [GSD-2022-1001753](https://insights.sbomify.com/GSD-2022-1001753/): ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (not scored)
- [GSD-2022-1001752](https://insights.sbomify.com/GSD-2022-1001752/): rxrpc: Fix call timer start racing with call destruction (not scored)
- [GSD-2022-1001751](https://insights.sbomify.com/GSD-2022-1001751/): io_uring: fix memory leak of uid in files registration (not scored)
- [GSD-2022-1001750](https://insights.sbomify.com/GSD-2022-1001750/): ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (not scored)
- [GSD-2022-1001749](https://insights.sbomify.com/GSD-2022-1001749/): ax25: fix UAF bug in ax25_send_control() (not scored)
- [GSD-2022-1001748](https://insights.sbomify.com/GSD-2022-1001748/): nbd: fix possible overflow on 'first_minor' in nbd_dev_add() (not scored)
- [GSD-2022-1001747](https://insights.sbomify.com/GSD-2022-1001747/): docs: sysctl/kernel: add missing bit to panic_print (not scored)
- [GSD-2022-1001746](https://insights.sbomify.com/GSD-2022-1001746/): net: preserve skb_end_offset() in skb_unclone_keeptruesize() (not scored)
- [GSD-2022-1001745](https://insights.sbomify.com/GSD-2022-1001745/): Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (not scored)
- [GSD-2022-1001744](https://insights.sbomify.com/GSD-2022-1001744/): coredump: Use the vma snapshot in fill_files_note (not scored)
- [GSD-2022-1001743](https://insights.sbomify.com/GSD-2022-1001743/): KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (not scored)
- [GSD-2022-1001742](https://insights.sbomify.com/GSD-2022-1001742/): Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" (not scored)
- [GSD-2022-1001741](https://insights.sbomify.com/GSD-2022-1001741/): ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (not scored)
- [GSD-2022-1001740](https://insights.sbomify.com/GSD-2022-1001740/): drm/amd/display: Fix memory leak (not scored)
- [GSD-2022-1001739](https://insights.sbomify.com/GSD-2022-1001739/): drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (not scored)
- [GSD-2022-1001738](https://insights.sbomify.com/GSD-2022-1001738/): usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value (not scored)
- [GSD-2022-1001737](https://insights.sbomify.com/GSD-2022-1001737/): drm/bridge: Add missing pm_runtime_put_sync (not scored)
- [GSD-2022-1001736](https://insights.sbomify.com/GSD-2022-1001736/): ath11k: fix kernel panic during unload/load ath11k modules (not scored)
- [GSD-2022-1001735](https://insights.sbomify.com/GSD-2022-1001735/): ath11k: pci: fix crash on suspend if board file is not found (not scored)
- [GSD-2022-1001734](https://insights.sbomify.com/GSD-2022-1001734/): ath11k: mhi: use mhi_sync_power_up() (not scored)
- [GSD-2022-1001733](https://insights.sbomify.com/GSD-2022-1001733/): mt76: mt7921: fix crash when startup fails. (not scored)
- [GSD-2022-1001732](https://insights.sbomify.com/GSD-2022-1001732/): mt76: dma: initialize skip_unmap in mt76_dma_rx_fill (not scored)
- [GSD-2022-1001731](https://insights.sbomify.com/GSD-2022-1001731/): iommu/arm-smmu-v3: fix event handling soft lockup (not scored)
- [GSD-2022-1001730](https://insights.sbomify.com/GSD-2022-1001730/): tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. (not scored)
- [GSD-2022-1001729](https://insights.sbomify.com/GSD-2022-1001729/): drm/amdgpu: Fix recursive locking warning (not scored)
- [GSD-2022-1001728](https://insights.sbomify.com/GSD-2022-1001728/): PCI: endpoint: Fix alignment fault error in copy tests (not scored)
- [GSD-2022-1001727](https://insights.sbomify.com/GSD-2022-1001727/): scsi: mpi3mr: Fix memory leaks (not scored)
- [GSD-2022-1001726](https://insights.sbomify.com/GSD-2022-1001726/): powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (not scored)
- [GSD-2022-1001725](https://insights.sbomify.com/GSD-2022-1001725/): dm ioctl: prevent potential spectre v1 gadget (not scored)
- [GSD-2022-1001724](https://insights.sbomify.com/GSD-2022-1001724/): scsi: pm8001: Fix task leak in pm8001_send_abort_all() (not scored)
- [GSD-2022-1001723](https://insights.sbomify.com/GSD-2022-1001723/): scsi: pm8001: Fix tag leaks on error (not scored)
- [GSD-2022-1001722](https://insights.sbomify.com/GSD-2022-1001722/): scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (not scored)
- [GSD-2022-1001721](https://insights.sbomify.com/GSD-2022-1001721/): mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU (not scored)
- [GSD-2022-1001720](https://insights.sbomify.com/GSD-2022-1001720/): scsi: hisi_sas: Free irq vectors in order for v3 HW (not scored)
- [GSD-2022-1001719](https://insights.sbomify.com/GSD-2022-1001719/): mips: ralink: fix a refcount leak in ill_acc_of_setup() (not scored)
- [GSD-2022-1001718](https://insights.sbomify.com/GSD-2022-1001718/): Bluetooth: use memset avoid memory leaks (not scored)
- [GSD-2022-1001717](https://insights.sbomify.com/GSD-2022-1001717/): PCI: endpoint: Fix misused goto label (not scored)
- [GSD-2022-1001716](https://insights.sbomify.com/GSD-2022-1001716/): MIPS: fix fortify panic when copying asm exception handlers (not scored)
- [GSD-2022-1001715](https://insights.sbomify.com/GSD-2022-1001715/): netlabel: fix out-of-bounds memory accesses (not scored)
- [GSD-2022-1001714](https://insights.sbomify.com/GSD-2022-1001714/): powerpc/secvar: fix refcount leak in format_show() (not scored)
- [GSD-2022-1001713](https://insights.sbomify.com/GSD-2022-1001713/): scsi: libfc: Fix use after free in fc_exch_abts_resp() (not scored)
- [GSD-2022-1001712](https://insights.sbomify.com/GSD-2022-1001712/): mt76: fix monitor mode crash with sdio driver (not scored)
- [GSD-2022-1001711](https://insights.sbomify.com/GSD-2022-1001711/): Bluetooth: Fix use after free in hci_send_acl (not scored)
- [GSD-2022-1001710](https://insights.sbomify.com/GSD-2022-1001710/): netfilter: conntrack: revisit gc autotuning (not scored)
- [GSD-2022-1001709](https://insights.sbomify.com/GSD-2022-1001709/): ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (not scored)
- [GSD-2022-1001708](https://insights.sbomify.com/GSD-2022-1001708/): ceph: fix inode reference leakage in ceph_get_snapdir() (not scored)
- [GSD-2022-1001707](https://insights.sbomify.com/GSD-2022-1001707/): staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (not scored)
- [GSD-2022-1001706](https://insights.sbomify.com/GSD-2022-1001706/): staging: wfx: fix an error handling in wfx_init_common() (not scored)
- [GSD-2022-1001705](https://insights.sbomify.com/GSD-2022-1001705/): staging: vchiq_core: handle NULL result of find_service_by_handle (not scored)
- [GSD-2022-1001704](https://insights.sbomify.com/GSD-2022-1001704/): habanalabs: fix possible memory leak in MMU DR fini (not scored)
- [GSD-2022-1001703](https://insights.sbomify.com/GSD-2022-1001703/): NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (not scored)
- [GSD-2022-1001702](https://insights.sbomify.com/GSD-2022-1001702/): drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (not scored)
- [GSD-2022-1001701](https://insights.sbomify.com/GSD-2022-1001701/): xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (not scored)
- [GSD-2022-1001700](https://insights.sbomify.com/GSD-2022-1001700/): x86: Annotate call_on_stack() (not scored)
- [GSD-2022-1001699](https://insights.sbomify.com/GSD-2022-1001699/): virtio_console: eliminate anonymous module_init & module_exit (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/149/