# Vulnerabilities published in 2022


- [GSD-2022-1001198](https://insights.sbomify.com/GSD-2022-1001198/): Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt (not scored)
- [GSD-2022-1001197](https://insights.sbomify.com/GSD-2022-1001197/): RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (not scored)
- [GSD-2022-1001196](https://insights.sbomify.com/GSD-2022-1001196/): mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb (not scored)
- [GSD-2022-1001195](https://insights.sbomify.com/GSD-2022-1001195/): RDMA/rxe: Change variable and function argument to proper type (not scored)
- [GSD-2022-1001194](https://insights.sbomify.com/GSD-2022-1001194/): af_netlink: Fix shift out of bounds in group mask calculation (not scored)
- [GSD-2022-1001193](https://insights.sbomify.com/GSD-2022-1001193/): powerpc/pseries: Fix use after free in remove_phb_dynamic() (not scored)
- [GSD-2022-1001192](https://insights.sbomify.com/GSD-2022-1001192/): ax25: Fix refcount leaks caused by ax25_cb_del() (not scored)
- [GSD-2022-1001191](https://insights.sbomify.com/GSD-2022-1001191/): ax25: Fix NULL pointer dereferences in ax25 timers (not scored)
- [GSD-2022-1001190](https://insights.sbomify.com/GSD-2022-1001190/): net: dsa: fix panic on shutdown if multi-chip tree failed to probe (not scored)
- [GSD-2022-1001189](https://insights.sbomify.com/GSD-2022-1001189/): net: bcmgenet: Use stronger register read/writes to assure ordering (not scored)
- [GSD-2022-1001188](https://insights.sbomify.com/GSD-2022-1001188/): tipc: fix the timer expires after interval 100ms (not scored)
- [GSD-2022-1001187](https://insights.sbomify.com/GSD-2022-1001187/): ice: fix 'scheduling while atomic' on aux critical err interrupt (not scored)
- [GSD-2022-1001186](https://insights.sbomify.com/GSD-2022-1001186/): drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (not scored)
- [GSD-2022-1001185](https://insights.sbomify.com/GSD-2022-1001185/): clk: qcom: ipq8074: fix PCI-E clock oops (not scored)
- [GSD-2022-1001184](https://insights.sbomify.com/GSD-2022-1001184/): cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse (not scored)
- [GSD-2022-1001183](https://insights.sbomify.com/GSD-2022-1001183/): mxser: fix xmit_buf leak in activate when LSR == 0xff (not scored)
- [GSD-2022-1001182](https://insights.sbomify.com/GSD-2022-1001182/): kernel/resource: fix kfree() of bootmem memory again (not scored)
- [GSD-2022-1001181](https://insights.sbomify.com/GSD-2022-1001181/): clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (not scored)
- [GSD-2022-1001180](https://insights.sbomify.com/GSD-2022-1001180/): remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (not scored)
- [GSD-2022-1001179](https://insights.sbomify.com/GSD-2022-1001179/): clk: Fix clk_hw_get_clk() when dev is NULL (not scored)
- [GSD-2022-1001178](https://insights.sbomify.com/GSD-2022-1001178/): kgdboc: fix return value of __setup handler (not scored)
- [GSD-2022-1001177](https://insights.sbomify.com/GSD-2022-1001177/): clk: visconti: prevent array overflow in visconti_clk_register_gates() (not scored)
- [GSD-2022-1001176](https://insights.sbomify.com/GSD-2022-1001176/): virt: acrn: fix a memory leak in acrn_dev_ioctl() (not scored)
- [GSD-2022-1001175](https://insights.sbomify.com/GSD-2022-1001175/): pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (not scored)
- [GSD-2022-1001174](https://insights.sbomify.com/GSD-2022-1001174/): NFS: remove unneeded check in decode_devicenotify_args() (not scored)
- [GSD-2022-1001173](https://insights.sbomify.com/GSD-2022-1001173/): vsock/virtio: initialize vdev->priv before using VQs (not scored)
- [GSD-2022-1001172](https://insights.sbomify.com/GSD-2022-1001172/): net: sparx5: switchdev: fix possible NULL pointer dereference (not scored)
- [GSD-2022-1001171](https://insights.sbomify.com/GSD-2022-1001171/): net/x25: Fix null-ptr-deref caused by x25_disconnect (not scored)
- [GSD-2022-1001170](https://insights.sbomify.com/GSD-2022-1001170/): lib/test: use after free in register_test_dev_kmod() (not scored)
- [GSD-2022-1001169](https://insights.sbomify.com/GSD-2022-1001169/): net/sched: act_ct: fix ref leak when switching zones (not scored)
- [GSD-2022-1001168](https://insights.sbomify.com/GSD-2022-1001168/): net: hns3: add vlan list lock to protect vlan list (not scored)
- [GSD-2022-1001167](https://insights.sbomify.com/GSD-2022-1001167/): xen: fix is_xen_pmu() (not scored)
- [GSD-2022-1001166](https://insights.sbomify.com/GSD-2022-1001166/): fs: fix fd table size alignment properly (not scored)
- [GSD-2022-1001165](https://insights.sbomify.com/GSD-2022-1001165/): LSM: general protection fault in legacy_parse_param (not scored)
- [GSD-2022-1001164](https://insights.sbomify.com/GSD-2022-1001164/): gcc-plugins/stackleak: Exactly match strings instead of prefixes (not scored)
- [GSD-2022-1001163](https://insights.sbomify.com/GSD-2022-1001163/): crypto: octeontx2 - CN10K CPT to RNM workaround (not scored)
- [GSD-2022-1001162](https://insights.sbomify.com/GSD-2022-1001162/): selinux: allow FIOCLEX and FIONCLEX with policy capability (not scored)
- [GSD-2022-1001161](https://insights.sbomify.com/GSD-2022-1001161/): block, bfq: don't move oom_bfqq (not scored)
- [GSD-2022-1001160](https://insights.sbomify.com/GSD-2022-1001160/): memstick/mspro_block: fix handling of read-only devices (not scored)
- [GSD-2022-1001159](https://insights.sbomify.com/GSD-2022-1001159/): hwrng: cavium - fix NULL but dereferenced coccicheck error (not scored)
- [GSD-2022-1001158](https://insights.sbomify.com/GSD-2022-1001158/): bfq: fix use-after-free in bfq_dispatch_request (not scored)
- [GSD-2022-1001157](https://insights.sbomify.com/GSD-2022-1001157/): Revert "Revert "block, bfq: honor already-setup queue merges"" (not scored)
- [GSD-2022-1001156](https://insights.sbomify.com/GSD-2022-1001156/): PM: core: keep irq flags in device_pm_check_callbacks() (not scored)
- [GSD-2022-1001155](https://insights.sbomify.com/GSD-2022-1001155/): ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (not scored)
- [GSD-2022-1001154](https://insights.sbomify.com/GSD-2022-1001154/): spi: fsi: Implement a timeout for polling status (not scored)
- [GSD-2022-1001153](https://insights.sbomify.com/GSD-2022-1001153/): parisc: Fix non-access data TLB cache flush faults (not scored)
- [GSD-2022-1001152](https://insights.sbomify.com/GSD-2022-1001152/): ext4: don't BUG if someone dirty pages without asking ext4 first (not scored)
- [GSD-2022-1001151](https://insights.sbomify.com/GSD-2022-1001151/): f2fs: fix to do sanity check on curseg->alloc_type (not scored)
- [GSD-2022-1001150](https://insights.sbomify.com/GSD-2022-1001150/): f2fs: use spin_lock to avoid hang (not scored)
- [GSD-2022-1001149](https://insights.sbomify.com/GSD-2022-1001149/): btrfs: do not clean up repair bio if submit fails (not scored)
- [GSD-2022-1001148](https://insights.sbomify.com/GSD-2022-1001148/): btrfs: do not double complete bio on errors during compressed reads (not scored)
- [GSD-2022-1001147](https://insights.sbomify.com/GSD-2022-1001147/): btrfs: make search_csum_tree return 0 if we get -EFBIG (not scored)
- [GSD-2022-1001146](https://insights.sbomify.com/GSD-2022-1001146/): btrfs: handle csum lookup errors properly on reads (not scored)
- [GSD-2022-1001145](https://insights.sbomify.com/GSD-2022-1001145/): ntfs: add sanity check on allocation size (not scored)
- [GSD-2022-1001144](https://insights.sbomify.com/GSD-2022-1001144/): media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (not scored)
- [GSD-2022-1001143](https://insights.sbomify.com/GSD-2022-1001143/): media: staging: media: zoran: move videodev alloc (not scored)
- [GSD-2022-1001142](https://insights.sbomify.com/GSD-2022-1001142/): media: ir_toy: free before error exiting (not scored)
- [GSD-2022-1001141](https://insights.sbomify.com/GSD-2022-1001141/): media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (not scored)
- [GSD-2022-1001140](https://insights.sbomify.com/GSD-2022-1001140/): video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (not scored)
- [GSD-2022-1001139](https://insights.sbomify.com/GSD-2022-1001139/): video: fbdev: cirrusfb: check pixclock to avoid divide by zero (not scored)
- [GSD-2022-1001138](https://insights.sbomify.com/GSD-2022-1001138/): powerpc/tm: Fix more userspace r13 corruption (not scored)
- [GSD-2022-1001137](https://insights.sbomify.com/GSD-2022-1001137/): powerpc/kasan: Fix early region not updated correctly (not scored)
- [GSD-2022-1001136](https://insights.sbomify.com/GSD-2022-1001136/): KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU (not scored)
- [GSD-2022-1001135](https://insights.sbomify.com/GSD-2022-1001135/): drm/dp: Fix off-by-one in register cache size (not scored)
- [GSD-2022-1001134](https://insights.sbomify.com/GSD-2022-1001134/): ARM: mmp: Fix failure to remove sram device (not scored)
- [GSD-2022-1001133](https://insights.sbomify.com/GSD-2022-1001133/): media: imx-jpeg: fix a bug of accessing array out of bounds (not scored)
- [GSD-2022-1001132](https://insights.sbomify.com/GSD-2022-1001132/): media: atomisp: fix dummy_ptr check to avoid duplicate active_bo (not scored)
- [GSD-2022-1001131](https://insights.sbomify.com/GSD-2022-1001131/): video: fbdev: sm712fb: Fix crash in smtcfb_write() (not scored)
- [GSD-2022-1001130](https://insights.sbomify.com/GSD-2022-1001130/): mmc: host: Return an error when ->enable_sdio_irq() ops is missing (not scored)
- [GSD-2022-1001129](https://insights.sbomify.com/GSD-2022-1001129/): ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe (not scored)
- [GSD-2022-1001128](https://insights.sbomify.com/GSD-2022-1001128/): scsi: qla2xxx: Fix crash during module load unload test (not scored)
- [GSD-2022-1001127](https://insights.sbomify.com/GSD-2022-1001127/): drm/i915: Treat SAGV block time 0 as SAGV disabled (not scored)
- [GSD-2022-1001126](https://insights.sbomify.com/GSD-2022-1001126/): scsi: qla2xxx: Implement ref count for SRB (not scored)
- [GSD-2022-1001125](https://insights.sbomify.com/GSD-2022-1001125/): scsi: qla2xxx: Fix warning message due to adisc being flushed (not scored)
- [GSD-2022-1001124](https://insights.sbomify.com/GSD-2022-1001124/): scsi: qla2xxx: Fix premature hw access after PCI error (not scored)
- [GSD-2022-1001123](https://insights.sbomify.com/GSD-2022-1001123/): scsi: qla2xxx: Fix scheduling while atomic (not scored)
- [GSD-2022-1001122](https://insights.sbomify.com/GSD-2022-1001122/): KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (not scored)
- [GSD-2022-1001121](https://insights.sbomify.com/GSD-2022-1001121/): scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (not scored)
- [GSD-2022-1001120](https://insights.sbomify.com/GSD-2022-1001120/): ubifs: rename_whiteout: Fix double free for whiteout_ui->data (not scored)
- [GSD-2022-1001119](https://insights.sbomify.com/GSD-2022-1001119/): ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (not scored)
- [GSD-2022-1001118](https://insights.sbomify.com/GSD-2022-1001118/): ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (not scored)
- [GSD-2022-1001117](https://insights.sbomify.com/GSD-2022-1001117/): KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (not scored)
- [GSD-2022-1001116](https://insights.sbomify.com/GSD-2022-1001116/): ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (not scored)
- [GSD-2022-1001115](https://insights.sbomify.com/GSD-2022-1001115/): KVM: SVM: fix panic on out-of-bounds guest IRQ (not scored)
- [GSD-2022-1001114](https://insights.sbomify.com/GSD-2022-1001114/): ubifs: Fix to add refcount once page is set private (not scored)
- [GSD-2022-1001113](https://insights.sbomify.com/GSD-2022-1001113/): wireguard: socket: free skb in send6 when ipv6 is disabled (not scored)
- [GSD-2022-1001112](https://insights.sbomify.com/GSD-2022-1001112/): XArray: Fix xas_create_range() when multi-order entry present (not scored)
- [GSD-2022-1001111](https://insights.sbomify.com/GSD-2022-1001111/): can: mcba_usb: properly check endpoint type (not scored)
- [GSD-2022-1001110](https://insights.sbomify.com/GSD-2022-1001110/): wireguard: socket: ignore v6 endpoints when ipv6 is disabled (not scored)
- [GSD-2022-1001109](https://insights.sbomify.com/GSD-2022-1001109/): rtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sram (not scored)
- [GSD-2022-1001108](https://insights.sbomify.com/GSD-2022-1001108/): gfs2: Fix gfs2_file_buffered_write endless loop workaround (not scored)
- [GSD-2022-1001107](https://insights.sbomify.com/GSD-2022-1001107/): rxrpc: Fix call timer start racing with call destruction (not scored)
- [GSD-2022-1001106](https://insights.sbomify.com/GSD-2022-1001106/): rxrpc: fix some null-ptr-deref bugs in server_key.c (not scored)
- [GSD-2022-1001105](https://insights.sbomify.com/GSD-2022-1001105/): watch_queue: Free the page array when watch_queue is dismantled (not scored)
- [GSD-2022-1001104](https://insights.sbomify.com/GSD-2022-1001104/): block: Fix the maximum minor value is blk_alloc_ext_minor() (not scored)
- [GSD-2022-1001103](https://insights.sbomify.com/GSD-2022-1001103/): ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (not scored)
- [GSD-2022-1001102](https://insights.sbomify.com/GSD-2022-1001102/): io_uring: bump poll refs to full 31-bits (not scored)
- [GSD-2022-1001101](https://insights.sbomify.com/GSD-2022-1001101/): virtio: use virtio_device_ready() in virtio_device_restore() (not scored)
- [GSD-2022-1001100](https://insights.sbomify.com/GSD-2022-1001100/): ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (not scored)
- [GSD-2022-1001099](https://insights.sbomify.com/GSD-2022-1001099/): io_uring: fix memory leak of uid in files registration (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/155/