# Vulnerabilities published in 2022


- [GSD-2022-1000093](https://insights.sbomify.com/GSD-2022-1000093/): moxart: fix potential use-after-free on remove path (not scored)
- [GSD-2022-1000092](https://insights.sbomify.com/GSD-2022-1000092/): scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (not scored)
- [GSD-2022-1000091](https://insights.sbomify.com/GSD-2022-1000091/): drm/nouveau: fix off by one in BIOS boundary checking (not scored)
- [GSD-2022-1000090](https://insights.sbomify.com/GSD-2022-1000090/): ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (not scored)
- [GSD-2022-1000089](https://insights.sbomify.com/GSD-2022-1000089/): ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (not scored)
- [GSD-2022-1000088](https://insights.sbomify.com/GSD-2022-1000088/): ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (not scored)
- [GSD-2022-1000087](https://insights.sbomify.com/GSD-2022-1000087/): af_packet: fix data-race in packet_setsockopt / packet_setsockopt (not scored)
- [GSD-2022-1000086](https://insights.sbomify.com/GSD-2022-1000086/): rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (not scored)
- [GSD-2022-1000085](https://insights.sbomify.com/GSD-2022-1000085/): net: amd-xgbe: Fix skb data length underflow (not scored)
- [GSD-2022-1000084](https://insights.sbomify.com/GSD-2022-1000084/): ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (not scored)
- [GSD-2022-1000083](https://insights.sbomify.com/GSD-2022-1000083/): net: fix information leakage in /proc/net/ptype (not scored)
- [GSD-2022-1000082](https://insights.sbomify.com/GSD-2022-1000082/): scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (not scored)
- [GSD-2022-1000081](https://insights.sbomify.com/GSD-2022-1000081/): USB: core: Fix hang in usb_kill_urb by adding memory barriers (not scored)
- [GSD-2022-1000080](https://insights.sbomify.com/GSD-2022-1000080/): usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS (not scored)
- [GSD-2022-1000079](https://insights.sbomify.com/GSD-2022-1000079/): udf: Fix NULL ptr deref when converting from inline format (not scored)
- [GSD-2022-1000078](https://insights.sbomify.com/GSD-2022-1000078/): Bluetooth: refactor malicious adv data check (not scored)
- [GSD-2022-1000065](https://insights.sbomify.com/GSD-2022-1000065/): Various phone carriers are blocking Apples Private Relay when users connect via cellular data. (not scored)
- [GSD-2022-1000064](https://insights.sbomify.com/GSD-2022-1000064/): tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). (not scored)
- [GSD-2022-1000063](https://insights.sbomify.com/GSD-2022-1000063/): ALSA: hda: intel-sdw-acpi: harden detection of controller (not scored)
- [GSD-2022-1000062](https://insights.sbomify.com/GSD-2022-1000062/): parisc: Clear stale IIR value on instruction access rights trap (not scored)
- [GSD-2022-1000061](https://insights.sbomify.com/GSD-2022-1000061/): usb: mtu3: fix list_head check warning (not scored)
- [GSD-2022-1000060](https://insights.sbomify.com/GSD-2022-1000060/): fs/mount_setattr: always cleanup mount_kattr (not scored)
- [GSD-2022-1000059](https://insights.sbomify.com/GSD-2022-1000059/): nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert (not scored)
- [GSD-2022-1000058](https://insights.sbomify.com/GSD-2022-1000058/): mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' (not scored)
- [GSD-2022-1000057](https://insights.sbomify.com/GSD-2022-1000057/): net/mlx5e: Wrap the tx reporter dump callback to extract the sq (not scored)
- [GSD-2022-1000056](https://insights.sbomify.com/GSD-2022-1000056/): binder: fix async_free_space accounting for empty parcels (not scored)
- [GSD-2022-1000055](https://insights.sbomify.com/GSD-2022-1000055/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (not scored)
- [GSD-2022-1000054](https://insights.sbomify.com/GSD-2022-1000054/): sctp: use call_rcu to free endpoint (not scored)
- [GSD-2022-1000053](https://insights.sbomify.com/GSD-2022-1000053/): net: fix use-after-free in tw_timer_handler (not scored)
- [GSD-2022-1000052](https://insights.sbomify.com/GSD-2022-1000052/): net/smc: fix kernel panic caused by race of smc_sock (not scored)
- [GSD-2022-1000051](https://insights.sbomify.com/GSD-2022-1000051/): i2c: validate user data in compat ioctl (not scored)
- [GSD-2022-1000050](https://insights.sbomify.com/GSD-2022-1000050/): NFC: st21nfca: Fix memory leak in device probe and remove (not scored)
- [GSD-2022-1000049](https://insights.sbomify.com/GSD-2022-1000049/): Input: appletouch - initialize work before device registration (not scored)
- [GSD-2022-1000048](https://insights.sbomify.com/GSD-2022-1000048/): tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). (not scored)
- [GSD-2022-1000047](https://insights.sbomify.com/GSD-2022-1000047/): parisc: Clear stale IIR value on instruction access rights trap (not scored)
- [GSD-2022-1000046](https://insights.sbomify.com/GSD-2022-1000046/): usb: mtu3: fix list_head check warning (not scored)
- [GSD-2022-1000045](https://insights.sbomify.com/GSD-2022-1000045/): net/mlx5e: Wrap the tx reporter dump callback to extract the sq (not scored)
- [GSD-2022-1000044](https://insights.sbomify.com/GSD-2022-1000044/): net/smc: fix kernel panic caused by race of smc_sock (not scored)
- [GSD-2022-1000043](https://insights.sbomify.com/GSD-2022-1000043/): NFC: st21nfca: Fix memory leak in device probe and remove (not scored)
- [GSD-2022-1000042](https://insights.sbomify.com/GSD-2022-1000042/): i2c: validate user data in compat ioctl (not scored)
- [GSD-2022-1000041](https://insights.sbomify.com/GSD-2022-1000041/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (not scored)
- [GSD-2022-1000040](https://insights.sbomify.com/GSD-2022-1000040/): net: fix use-after-free in tw_timer_handler (not scored)
- [GSD-2022-1000039](https://insights.sbomify.com/GSD-2022-1000039/): sctp: use call_rcu to free endpoint (not scored)
- [GSD-2022-1000038](https://insights.sbomify.com/GSD-2022-1000038/): binder: fix async_free_space accounting for empty parcels (not scored)
- [GSD-2022-1000037](https://insights.sbomify.com/GSD-2022-1000037/): Input: appletouch - initialize work before device registration (not scored)
- [GSD-2022-1000036](https://insights.sbomify.com/GSD-2022-1000036/): tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). (not scored)
- [GSD-2022-1000035](https://insights.sbomify.com/GSD-2022-1000035/): usb: mtu3: fix list_head check warning (not scored)
- [GSD-2022-1000034](https://insights.sbomify.com/GSD-2022-1000034/): i2c: validate user data in compat ioctl (not scored)
- [GSD-2022-1000033](https://insights.sbomify.com/GSD-2022-1000033/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (not scored)
- [GSD-2022-1000032](https://insights.sbomify.com/GSD-2022-1000032/): binder: fix async_free_space accounting for empty parcels (not scored)
- [GSD-2022-1000031](https://insights.sbomify.com/GSD-2022-1000031/): sctp: use call_rcu to free endpoint (not scored)
- [GSD-2022-1000030](https://insights.sbomify.com/GSD-2022-1000030/): net: fix use-after-free in tw_timer_handler (not scored)
- [GSD-2022-1000029](https://insights.sbomify.com/GSD-2022-1000029/): NFC: st21nfca: Fix memory leak in device probe and remove (not scored)
- [GSD-2022-1000028](https://insights.sbomify.com/GSD-2022-1000028/): Input: appletouch - initialize work before device registration (not scored)
- [GSD-2022-1000027](https://insights.sbomify.com/GSD-2022-1000027/): sctp: use call_rcu to free endpoint (not scored)
- [GSD-2022-1000026](https://insights.sbomify.com/GSD-2022-1000026/): i2c: validate user data in compat ioctl (not scored)
- [GSD-2022-1000025](https://insights.sbomify.com/GSD-2022-1000025/): Input: appletouch - initialize work before device registration (not scored)
- [GSD-2022-1000024](https://insights.sbomify.com/GSD-2022-1000024/): binder: fix async_free_space accounting for empty parcels (not scored)
- [GSD-2022-1000023](https://insights.sbomify.com/GSD-2022-1000023/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (not scored)
- [GSD-2022-1000022](https://insights.sbomify.com/GSD-2022-1000022/): NFC: st21nfca: Fix memory leak in device probe and remove (not scored)
- [GSD-2022-1000021](https://insights.sbomify.com/GSD-2022-1000021/): net: fix use-after-free in tw_timer_handler (not scored)
- [GSD-2022-1000020](https://insights.sbomify.com/GSD-2022-1000020/): Input: appletouch - initialize work before device registration (not scored)
- [GSD-2022-1000019](https://insights.sbomify.com/GSD-2022-1000019/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (not scored)
- [GSD-2022-1000018](https://insights.sbomify.com/GSD-2022-1000018/): sctp: use call_rcu to free endpoint (not scored)
- [GSD-2022-1000017](https://insights.sbomify.com/GSD-2022-1000017/): NFC: st21nfca: Fix memory leak in device probe and remove (not scored)
- [GSD-2022-1000016](https://insights.sbomify.com/GSD-2022-1000016/): net: fix use-after-free in tw_timer_handler (not scored)
- [GSD-2022-1000015](https://insights.sbomify.com/GSD-2022-1000015/): binder: fix async_free_space accounting for empty parcels (not scored)
- [GSD-2022-1000014](https://insights.sbomify.com/GSD-2022-1000014/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (not scored)
- [GSD-2022-1000013](https://insights.sbomify.com/GSD-2022-1000013/): net: fix use-after-free in tw_timer_handler (not scored)
- [GSD-2022-1000012](https://insights.sbomify.com/GSD-2022-1000012/): Input: appletouch - initialize work before device registration (not scored)
- [GSD-2022-1000011](https://insights.sbomify.com/GSD-2022-1000011/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (not scored)
- [GSD-2022-1000010](https://insights.sbomify.com/GSD-2022-1000010/): Input: appletouch - initialize work before device registration (not scored)
- [GSD-2022-1000009](https://insights.sbomify.com/GSD-2022-1000009/): net: fix use-after-free in tw_timer_handler (not scored)
- [GSD-2022-1000008](https://insights.sbomify.com/GSD-2022-1000008/): faker.js 6.6.6 is broken and the developer has wiped the original GitHub repo (not scored)
- [GSD-2021-44142](https://insights.sbomify.com/GSD-2021-44142/): Remote code execution as root in Samba prior to version 4.13.17 (not scored)
- [GHSA-xxx9-3xcr-gjj3](https://insights.sbomify.com/GHSA-xxx9-3xcr-gjj3/): XML Injection in Xerces Java affects Nokogiri (not scored)
- [GHSA-xpp3-xrff-w6rh](https://insights.sbomify.com/GHSA-xpp3-xrff-w6rh/): rocksdb vulnerable to out-of-bounds read (not scored)
- [GHSA-xhr8-mpwq-2rr2](https://insights.sbomify.com/GHSA-xhr8-mpwq-2rr2/): Automatic named constructor discovery in Valinor (not scored)
- [GHSA-xfqg-p48g-hh94](https://insights.sbomify.com/GHSA-xfqg-p48g-hh94/): Login timing attack in ezsystems/ezpublish-kernel (not scored)
- [GHSA-xf83-q765-xm6m](https://insights.sbomify.com/GHSA-xf83-q765-xm6m/): `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode (not scored)
- [GHSA-x9jp-4w8m-4f3c](https://insights.sbomify.com/GHSA-x9jp-4w8m-4f3c/): Cross Site Scripting vulnerability in django-jsonform's admin form. (not scored)
- [GHSA-x4mq-m75f-mx8m](https://insights.sbomify.com/GHSA-x4mq-m75f-mx8m/): Delegate functions are missing `Send` bound (not scored)
- [GHSA-x279-68rr-jp4p](https://insights.sbomify.com/GHSA-x279-68rr-jp4p/): Blst vulnerable to incorrect results for some inputs in blst_fp_eucl_inverse function (not scored)
- [GHSA-wxgw-qj99-44c2](https://insights.sbomify.com/GHSA-wxgw-qj99-44c2/): Prototype Pollution in node-forge util.setPath API (not scored)
- [GHSA-wwh2-r387-g5rm](https://insights.sbomify.com/GHSA-wwh2-r387-g5rm/): tower-http's improper validation of Windows paths could lead to directory traversal attack (not scored)
- [GHSA-wrrw-crp8-979q](https://insights.sbomify.com/GHSA-wrrw-crp8-979q/): Pageflow vulnerable to sensitive user data extraction via Ransack query injection (not scored)
- [GHSA-wpfr-6297-9v57](https://insights.sbomify.com/GHSA-wpfr-6297-9v57/): User object created with invalid provider data in GoTrue (not scored)
- [GHSA-wm2r-rp98-8pmh](https://insights.sbomify.com/GHSA-wm2r-rp98-8pmh/): Exposure of SSH credentials in Rancher/Fleet (not scored)
- [GHSA-whpx-q3rq-w8jc](https://insights.sbomify.com/GHSA-whpx-q3rq-w8jc/): Hardening of TypedArrays with non-canonical numeric property names in SES (not scored)
- [GHSA-wf98-vxv9-jqfv](https://insights.sbomify.com/GHSA-wf98-vxv9-jqfv/): XSS Injection Vulnerability (not scored)
- [GHSA-wcv5-vrvr-3rx2](https://insights.sbomify.com/GHSA-wcv5-vrvr-3rx2/): Integer Overflow or Wraparound in TensorFlow (not scored)
- [GHSA-wc5v-r48v-g4vh](https://insights.sbomify.com/GHSA-wc5v-r48v-g4vh/): Cilium host policy bypass in endpoint-routes mode with dual-stack (not scored)
- [GHSA-wc36-xgcc-jwpr](https://insights.sbomify.com/GHSA-wc36-xgcc-jwpr/): Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord` (not scored)
- [GHSA-w8qp-hmh5-4v9v](https://insights.sbomify.com/GHSA-w8qp-hmh5-4v9v/): Object state limitation has no effect (not scored)
- [GHSA-w4f8-fxq2-j35v](https://insights.sbomify.com/GHSA-w4f8-fxq2-j35v/): Possible privilege escalation via bash completion script (not scored)
- [GHSA-w3vw-ccc5-qr8v](https://insights.sbomify.com/GHSA-w3vw-ccc5-qr8v/): Use After Free in Context::start_auth_session (not scored)
- [GHSA-w2j5-3rcx-vx7x](https://insights.sbomify.com/GHSA-w2j5-3rcx-vx7x/): Sysctls applied to containers with host IPC or host network namespaces can affect the host (not scored)
- [GHSA-vx2x-9cff-fhjw](https://insights.sbomify.com/GHSA-vx2x-9cff-fhjw/): DSInternals Credential Roaming Elevation of Privilege Vulnerability (not scored)
- [GHSA-vp35-85q5-9f25](https://insights.sbomify.com/GHSA-vp35-85q5-9f25/): Container build can leak any path on the host into the container (not scored)
- [GHSA-v78c-4p63-2j6c](https://insights.sbomify.com/GHSA-v78c-4p63-2j6c/): Cleartext Transmission of Sensitive Information in moment-timezone (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/166/