# Vulnerabilities published in 2022


- [GSD-2022-1000297](https://insights.sbomify.com/GSD-2022-1000297/): ax25: improve the incomplete fix to avoid UAF and NPD bugs (not scored)
- [GSD-2022-1000296](https://insights.sbomify.com/GSD-2022-1000296/): libsubcmd: Fix use-after-free for realloc(..., 0) (not scored)
- [GSD-2022-1000295](https://insights.sbomify.com/GSD-2022-1000295/): parisc: Fix data TLB miss in sba_unmap_sg (not scored)
- [GSD-2022-1000294](https://insights.sbomify.com/GSD-2022-1000294/): drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit (not scored)
- [GSD-2022-1000293](https://insights.sbomify.com/GSD-2022-1000293/): vsock: remove vsock from connected table when connect is interrupted by a signal (not scored)
- [GSD-2022-1000291](https://insights.sbomify.com/GSD-2022-1000291/): vt_ioctl: fix array_index_nospec in vt_setactivate (not scored)
- [GSD-2022-1000290](https://insights.sbomify.com/GSD-2022-1000290/): net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (not scored)
- [GSD-2022-1000289](https://insights.sbomify.com/GSD-2022-1000289/): net: fix a memleak when uncloning an skb dst and its metadata (not scored)
- [GSD-2022-1000288](https://insights.sbomify.com/GSD-2022-1000288/): ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (not scored)
- [GSD-2022-1000287](https://insights.sbomify.com/GSD-2022-1000287/): net: do not keep the dst cache when uncloning an skb dst and its metadata (not scored)
- [GSD-2022-1000286](https://insights.sbomify.com/GSD-2022-1000286/): scsi: target: iscsi: Make sure the np under each tpg is unique (not scored)
- [GSD-2022-1000282](https://insights.sbomify.com/GSD-2022-1000282/): ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (not scored)
- [GSD-2022-1000281](https://insights.sbomify.com/GSD-2022-1000281/): ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (not scored)
- [GSD-2022-1000280](https://insights.sbomify.com/GSD-2022-1000280/): ASoC: hdmi-codec: Fix OOB memory accesses (not scored)
- [GSD-2022-1000279](https://insights.sbomify.com/GSD-2022-1000279/): selinux: fix double free of cond_list on error paths (not scored)
- [GSD-2022-1000278](https://insights.sbomify.com/GSD-2022-1000278/): ovl: fix NULL pointer dereference in copy up warning (not scored)
- [GSD-2022-1000277](https://insights.sbomify.com/GSD-2022-1000277/): af_packet: fix data-race in packet_setsockopt / packet_setsockopt (not scored)
- [GSD-2022-1000276](https://insights.sbomify.com/GSD-2022-1000276/): rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (not scored)
- [GSD-2022-1000275](https://insights.sbomify.com/GSD-2022-1000275/): net: sched: fix use-after-free in tc_new_tfilter() (not scored)
- [GSD-2022-1000274](https://insights.sbomify.com/GSD-2022-1000274/): net: amd-xgbe: Fix skb data length underflow (not scored)
- [GSD-2022-1000273](https://insights.sbomify.com/GSD-2022-1000273/): ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (not scored)
- [GSD-2022-1000272](https://insights.sbomify.com/GSD-2022-1000272/): net/mlx5: Use del_timer_sync in fw reset flow of halting poll (not scored)
- [GSD-2022-1000271](https://insights.sbomify.com/GSD-2022-1000271/): net/mlx5e: Fix handling of wrong devices during bond netevent (not scored)
- [GSD-2022-1000270](https://insights.sbomify.com/GSD-2022-1000270/): net: ipa: prevent concurrent replenish (not scored)
- [GSD-2022-1000269](https://insights.sbomify.com/GSD-2022-1000269/): PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (not scored)
- [GSD-2022-1000268](https://insights.sbomify.com/GSD-2022-1000268/): block: Fix wrong offset in bio_truncate() (not scored)
- [GSD-2022-1000267](https://insights.sbomify.com/GSD-2022-1000267/): net: bridge: vlan: fix memory leak in __allowed_ingress (not scored)
- [GSD-2022-1000266](https://insights.sbomify.com/GSD-2022-1000266/): yam: fix a memory leak in yam_siocdevprivate() (not scored)
- [GSD-2022-1000265](https://insights.sbomify.com/GSD-2022-1000265/): drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc (not scored)
- [GSD-2022-1000264](https://insights.sbomify.com/GSD-2022-1000264/): net/smc: Transitional solution for clcsock race issue (not scored)
- [GSD-2022-1000263](https://insights.sbomify.com/GSD-2022-1000263/): powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending (not scored)
- [GSD-2022-1000262](https://insights.sbomify.com/GSD-2022-1000262/): phylib: fix potential use-after-free (not scored)
- [GSD-2022-1000261](https://insights.sbomify.com/GSD-2022-1000261/): powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 (not scored)
- [GSD-2022-1000260](https://insights.sbomify.com/GSD-2022-1000260/): KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance (not scored)
- [GSD-2022-1000259](https://insights.sbomify.com/GSD-2022-1000259/): drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (not scored)
- [GSD-2022-1000258](https://insights.sbomify.com/GSD-2022-1000258/): net: fix information leakage in /proc/net/ptype (not scored)
- [GSD-2022-1000257](https://insights.sbomify.com/GSD-2022-1000257/): ARM: 9170/1: fix panic when kasan and kprobe are enabled (not scored)
- [GSD-2022-1000256](https://insights.sbomify.com/GSD-2022-1000256/): scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (not scored)
- [GSD-2022-1000255](https://insights.sbomify.com/GSD-2022-1000255/): rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (not scored)
- [GSD-2022-1000254](https://insights.sbomify.com/GSD-2022-1000254/): i40e: Fix queues reservation for XDP (not scored)
- [GSD-2022-1000253](https://insights.sbomify.com/GSD-2022-1000253/): powerpc/32s: Fix kasan_init_region() for KASAN (not scored)
- [GSD-2022-1000252](https://insights.sbomify.com/GSD-2022-1000252/): mm, kasan: use compare-exchange operation to set KASAN page tag (not scored)
- [GSD-2022-1000251](https://insights.sbomify.com/GSD-2022-1000251/): USB: core: Fix hang in usb_kill_urb by adding memory barriers (not scored)
- [GSD-2022-1000250](https://insights.sbomify.com/GSD-2022-1000250/): usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS (not scored)
- [GSD-2022-1000249](https://insights.sbomify.com/GSD-2022-1000249/): usb: xhci-plat: fix crash when suspend if remote wake enable (not scored)
- [GSD-2022-1000248](https://insights.sbomify.com/GSD-2022-1000248/): KVM: x86: Forcibly leave nested virt when SMM state is toggled (not scored)
- [GSD-2022-1000247](https://insights.sbomify.com/GSD-2022-1000247/): KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (not scored)
- [GSD-2022-1000246](https://insights.sbomify.com/GSD-2022-1000246/): psi: Fix uaf issue when psi trigger is destroyed while being polled (not scored)
- [GSD-2022-1000245](https://insights.sbomify.com/GSD-2022-1000245/): ceph: properly put ceph_string reference after async create attempt (not scored)
- [GSD-2022-1000244](https://insights.sbomify.com/GSD-2022-1000244/): tracing/histogram: Fix a potential memory leak for kstrdup() (not scored)
- [GSD-2022-1000243](https://insights.sbomify.com/GSD-2022-1000243/): efi: runtime: avoid EFIv2 runtime services on Apple x86 machines (not scored)
- [GSD-2022-1000242](https://insights.sbomify.com/GSD-2022-1000242/): udf: Fix NULL ptr deref when converting from inline format (not scored)
- [GSD-2022-1000241](https://insights.sbomify.com/GSD-2022-1000241/): bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() (not scored)
- [GSD-2022-1000240](https://insights.sbomify.com/GSD-2022-1000240/): Bluetooth: refactor malicious adv data check (not scored)
- [GSD-2022-1000239](https://insights.sbomify.com/GSD-2022-1000239/): drm/vmwgfx: Fix stale file descriptors on failed usercopy (not scored)
- [GSD-2022-1000238](https://insights.sbomify.com/GSD-2022-1000238/): select: Fix indefinitely sleeping task in poll_schedule_timeout() (not scored)
- [GSD-2022-1000237](https://insights.sbomify.com/GSD-2022-1000237/): tipc: improve size validations for received domain records (not scored)
- [GSD-2022-1000236](https://insights.sbomify.com/GSD-2022-1000236/): moxart: fix potential use-after-free on remove path (not scored)
- [GSD-2022-1000235](https://insights.sbomify.com/GSD-2022-1000235/): ext4: fix error handling in ext4_fc_record_modified_inode() (not scored)
- [GSD-2022-1000234](https://insights.sbomify.com/GSD-2022-1000234/): perf/x86/intel/pt: Fix crash with stop filters in single-range mode (not scored)
- [GSD-2022-1000233](https://insights.sbomify.com/GSD-2022-1000233/): bpf: Use VM_MAP instead of VM_ALLOC for ringbuf (not scored)
- [GSD-2022-1000232](https://insights.sbomify.com/GSD-2022-1000232/): gve: fix the wrong AdminQ buffer queue index check (not scored)
- [GSD-2022-1000231](https://insights.sbomify.com/GSD-2022-1000231/): scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (not scored)
- [GSD-2022-1000230](https://insights.sbomify.com/GSD-2022-1000230/): ASoC: max9759: fix underflow in speaker_gain_control_put() (not scored)
- [GSD-2022-1000229](https://insights.sbomify.com/GSD-2022-1000229/): net: macsec: Fix offload support for NETDEV_UNREGISTER event (not scored)
- [GSD-2022-1000228](https://insights.sbomify.com/GSD-2022-1000228/): iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (not scored)
- [GSD-2022-1000227](https://insights.sbomify.com/GSD-2022-1000227/): spi: uniphier: fix reference count leak in uniphier_spi_probe() (not scored)
- [GSD-2022-1000226](https://insights.sbomify.com/GSD-2022-1000226/): net: ieee802154: ca8210: Stop leaking skb's (not scored)
- [GSD-2022-1000225](https://insights.sbomify.com/GSD-2022-1000225/): RDMA/ucma: Protect mc during concurrent multicast leaves (not scored)
- [GSD-2022-1000224](https://insights.sbomify.com/GSD-2022-1000224/): RDMA/cma: Use correct address when leaving multicast group (not scored)
- [GSD-2022-1000223](https://insights.sbomify.com/GSD-2022-1000223/): IB/hfi1: Fix AIP early init panic (not scored)
- [GSD-2022-1000222](https://insights.sbomify.com/GSD-2022-1000222/): dma-buf: heaps: Fix potential spectre v1 gadget (not scored)
- [GSD-2022-1000221](https://insights.sbomify.com/GSD-2022-1000221/): mm/kmemleak: avoid scanning potential huge holes (not scored)
- [GSD-2022-1000220](https://insights.sbomify.com/GSD-2022-1000220/): drm/nouveau: fix off by one in BIOS boundary checking (not scored)
- [GSD-2022-1000219](https://insights.sbomify.com/GSD-2022-1000219/): btrfs: fix deadlock between quota disable and qgroup rescan worker (not scored)
- [GSD-2022-1000218](https://insights.sbomify.com/GSD-2022-1000218/): ALSA: hda: Fix UAF of leds class devs at unbinding (not scored)
- [GSD-2022-1000217](https://insights.sbomify.com/GSD-2022-1000217/): ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (not scored)
- [GSD-2022-1000216](https://insights.sbomify.com/GSD-2022-1000216/): ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (not scored)
- [GSD-2022-1000215](https://insights.sbomify.com/GSD-2022-1000215/): ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (not scored)
- [GSD-2022-1000214](https://insights.sbomify.com/GSD-2022-1000214/): selinux: fix double free of cond_list on error paths (not scored)
- [GSD-2022-1000213](https://insights.sbomify.com/GSD-2022-1000213/): af_packet: fix data-race in packet_setsockopt / packet_setsockopt (not scored)
- [GSD-2022-1000212](https://insights.sbomify.com/GSD-2022-1000212/): rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (not scored)
- [GSD-2022-1000211](https://insights.sbomify.com/GSD-2022-1000211/): net: sched: fix use-after-free in tc_new_tfilter() (not scored)
- [GSD-2022-1000210](https://insights.sbomify.com/GSD-2022-1000210/): net: amd-xgbe: Fix skb data length underflow (not scored)
- [GSD-2022-1000209](https://insights.sbomify.com/GSD-2022-1000209/): ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (not scored)
- [GSD-2022-1000208](https://insights.sbomify.com/GSD-2022-1000208/): net/mlx5: Use del_timer_sync in fw reset flow of halting poll (not scored)
- [GSD-2022-1000207](https://insights.sbomify.com/GSD-2022-1000207/): net/mlx5e: Fix handling of wrong devices during bond netevent (not scored)
- [GSD-2022-1000206](https://insights.sbomify.com/GSD-2022-1000206/): net: ipa: prevent concurrent replenish (not scored)
- [GSD-2022-1000205](https://insights.sbomify.com/GSD-2022-1000205/): block: Fix wrong offset in bio_truncate() (not scored)
- [GSD-2022-1000204](https://insights.sbomify.com/GSD-2022-1000204/): PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (not scored)
- [GSD-2022-1000203](https://insights.sbomify.com/GSD-2022-1000203/): net: bridge: vlan: fix memory leak in __allowed_ingress (not scored)
- [GSD-2022-1000202](https://insights.sbomify.com/GSD-2022-1000202/): yam: fix a memory leak in yam_siocdevprivate() (not scored)
- [GSD-2022-1000201](https://insights.sbomify.com/GSD-2022-1000201/): drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc (not scored)
- [GSD-2022-1000200](https://insights.sbomify.com/GSD-2022-1000200/): powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending (not scored)
- [GSD-2022-1000199](https://insights.sbomify.com/GSD-2022-1000199/): phylib: fix potential use-after-free (not scored)
- [GSD-2022-1000198](https://insights.sbomify.com/GSD-2022-1000198/): powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 (not scored)
- [GSD-2022-1000197](https://insights.sbomify.com/GSD-2022-1000197/): drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (not scored)
- [GSD-2022-1000196](https://insights.sbomify.com/GSD-2022-1000196/): net: fix information leakage in /proc/net/ptype (not scored)
- [GSD-2022-1000195](https://insights.sbomify.com/GSD-2022-1000195/): scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (not scored)
- [GSD-2022-1000194](https://insights.sbomify.com/GSD-2022-1000194/): rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/164/