# Vulnerabilities published in 2022


- [CVE-2022-50715](https://insights.sbomify.com/CVE-2022-50715/): md/raid1: stop mdx_raid1 thread when raid1 array run failed (not scored)
- [CVE-2022-50714](https://insights.sbomify.com/CVE-2022-50714/): wifi: mt76: mt7921e: fix rmmod crash in driver reload test (not scored)
- [CVE-2022-50713](https://insights.sbomify.com/CVE-2022-50713/): clk: visconti: Fix memory leak in visconti_register_pll() (not scored)
- [CVE-2022-50712](https://insights.sbomify.com/CVE-2022-50712/): devlink: hold region lock when flushing snapshots (not scored)
- [CVE-2022-50711](https://insights.sbomify.com/CVE-2022-50711/): net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe() (not scored)
- [CVE-2022-50710](https://insights.sbomify.com/CVE-2022-50710/): ice: set tx_tstamps when creating new Tx rings via ethtool (not scored)
- [CVE-2022-50709](https://insights.sbomify.com/CVE-2022-50709/): wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (not scored)
- [CVE-2022-50708](https://insights.sbomify.com/CVE-2022-50708/): HSI: ssi_protocol: fix potential resource leak in ssip_pn_open() (not scored)
- [CVE-2022-50707](https://insights.sbomify.com/CVE-2022-50707/): virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() (not scored)
- [CVE-2022-50706](https://insights.sbomify.com/CVE-2022-50706/): net/ieee802154: don't warn zero-sized raw_sendmsg() (not scored)
- [CVE-2022-50705](https://insights.sbomify.com/CVE-2022-50705/): io_uring/rw: defer fsnotify calls to task context (not scored)
- [CVE-2022-50704](https://insights.sbomify.com/CVE-2022-50704/): USB: gadget: Fix use-after-free during usb config switch (not scored)
- [CVE-2022-50703](https://insights.sbomify.com/CVE-2022-50703/): soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (not scored)
- [CVE-2022-50702](https://insights.sbomify.com/CVE-2022-50702/): vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (not scored)
- [CVE-2022-50701](https://insights.sbomify.com/CVE-2022-50701/): wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (high 7.1)
- [CVE-2022-50700](https://insights.sbomify.com/CVE-2022-50700/): wifi: ath10k: Delay the unmapping of the buffer (high 7.5)
- [CVE-2022-50699](https://insights.sbomify.com/CVE-2022-50699/): selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (not scored)
- [CVE-2022-50698](https://insights.sbomify.com/CVE-2022-50698/): ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (not scored)
- [CVE-2022-50697](https://insights.sbomify.com/CVE-2022-50697/): mrp: introduce active flags to prevent UAF when applicant uninit (high 7.8)
- [CVE-2022-50696](https://insights.sbomify.com/CVE-2022-50696/): SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass (critical 9.3)
- [CVE-2022-50695](https://insights.sbomify.com/CVE-2022-50695/): SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands (high 8.7)
- [CVE-2022-50694](https://insights.sbomify.com/CVE-2022-50694/): SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter (high 8.8)
- [CVE-2022-50693](https://insights.sbomify.com/CVE-2022-50693/): Splashtop 8.71.12001.0 - Unquoted Service Path (high 8.5)
- [CVE-2022-50692](https://insights.sbomify.com/CVE-2022-50692/): SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability (medium 6.9)
- [CVE-2022-50691](https://insights.sbomify.com/CVE-2022-50691/): MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh (critical 9.3)
- [CVE-2022-50690](https://insights.sbomify.com/CVE-2022-50690/): Wondershare MirrorGo 2.0.11.346 Local Privilege Escalation via Insecure File Permissions (high 8.5)
- [CVE-2022-50689](https://insights.sbomify.com/CVE-2022-50689/): Cobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field (medium 6.9)
- [CVE-2022-50688](https://insights.sbomify.com/CVE-2022-50688/): Cobian Backup Gravity 11.2.0.582 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2022-50687](https://insights.sbomify.com/CVE-2022-50687/): Cobian Backup 11 Gravity 11.2.0.582 Local Denial of Service via Password Field (medium 6.9)
- [CVE-2022-50686](https://insights.sbomify.com/CVE-2022-50686/): Kentico Xperience <= 12.0 Portal Engine Form Control Information Disclosure (medium 6.9)
- [CVE-2022-50685](https://insights.sbomify.com/CVE-2022-50685/): Kentico Xperience <= 13.0.56 File Upload Stored XSS (medium 5.1)
- [CVE-2022-50684](https://insights.sbomify.com/CVE-2022-50684/): Kentico Xperience <= 13.0.71 Form Emails HTML Injection (medium 5.1)
- [CVE-2022-50683](https://insights.sbomify.com/CVE-2022-50683/): Kentico Xperience <= 13.0.74 Form Configuration Stored XSS (medium 5.1)
- [CVE-2022-50682](https://insights.sbomify.com/CVE-2022-50682/): Kentico Xperience <= 13.0.79 Routing Engine CRLF Injection (medium 6.9)
- [CVE-2022-50681](https://insights.sbomify.com/CVE-2022-50681/): Kentico Xperience <= 13.0.88 Rich Text Editor Reflected XSS (medium 5.1)
- [CVE-2022-50680](https://insights.sbomify.com/CVE-2022-50680/): Kentico Xperience <= 13.0.92 Email Marketing Stored XSS (medium 5.1)
- [CVE-2022-50679](https://insights.sbomify.com/CVE-2022-50679/): i40e: Fix DMA mappings leak (not scored)
- [CVE-2022-50678](https://insights.sbomify.com/CVE-2022-50678/): wifi: brcmfmac: fix invalid address access when enabling SCAN log level (not scored)
- [CVE-2022-50677](https://insights.sbomify.com/CVE-2022-50677/): ipmi: fix use after free in _ipmi_destroy_user() (high 7.0)
- [CVE-2022-50676](https://insights.sbomify.com/CVE-2022-50676/): net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (high 7.5)
- [CVE-2022-50675](https://insights.sbomify.com/CVE-2022-50675/): arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (not scored)
- [CVE-2022-50674](https://insights.sbomify.com/CVE-2022-50674/): riscv: vdso: fix NULL deference in vdso_join_timens() when vfork (not scored)
- [CVE-2022-50673](https://insights.sbomify.com/CVE-2022-50673/): ext4: fix use-after-free in ext4_orphan_cleanup (high 7.8)
- [CVE-2022-50672](https://insights.sbomify.com/CVE-2022-50672/): mailbox: zynq-ipi: fix error handling while device_register() fails (not scored)
- [CVE-2022-50671](https://insights.sbomify.com/CVE-2022-50671/): RDMA/rxe: Fix "kernel NULL pointer dereference" error (high 7.5)
- [CVE-2022-50670](https://insights.sbomify.com/CVE-2022-50670/): mmc: omap_hsmmc: fix return value check of mmc_add_host() (not scored)
- [CVE-2022-50669](https://insights.sbomify.com/CVE-2022-50669/): misc: ocxl: fix possible name leak in ocxl_file_register_afu() (not scored)
- [CVE-2022-50668](https://insights.sbomify.com/CVE-2022-50668/): ext4: fix deadlock due to mbcache entry corruption (high 7.5)
- [CVE-2022-50667](https://insights.sbomify.com/CVE-2022-50667/): drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (not scored)
- [CVE-2022-50666](https://insights.sbomify.com/CVE-2022-50666/): RDMA/siw: Fix QP destroy to wait for all references dropped. (critical 9.8)
- [CVE-2022-50665](https://insights.sbomify.com/CVE-2022-50665/): wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected (high 7.1)
- [CVE-2022-50664](https://insights.sbomify.com/CVE-2022-50664/): media: dvb-frontends: fix leak of memory fw (not scored)
- [CVE-2022-50663](https://insights.sbomify.com/CVE-2022-50663/): net: stmmac: fix possible memory leak in stmmac_dvr_probe() (not scored)
- [CVE-2022-50662](https://insights.sbomify.com/CVE-2022-50662/): RDMA/hns: fix memory leak in hns_roce_alloc_mr() (not scored)
- [CVE-2022-50661](https://insights.sbomify.com/CVE-2022-50661/): seccomp: Move copy_seccomp() to no failure path. (not scored)
- [CVE-2022-50660](https://insights.sbomify.com/CVE-2022-50660/): wifi: ipw2200: fix memory leak in ipw_wdev_init() (not scored)
- [CVE-2022-50659](https://insights.sbomify.com/CVE-2022-50659/): hwrng: geode - Fix PCI device refcount leak (not scored)
- [CVE-2022-50658](https://insights.sbomify.com/CVE-2022-50658/): cpufreq: qcom: fix memory leak in error path (not scored)
- [CVE-2022-50657](https://insights.sbomify.com/CVE-2022-50657/): riscv: mm: add missing memcpy in kasan_init (not scored)
- [CVE-2022-50656](https://insights.sbomify.com/CVE-2022-50656/): nfc: pn533: Clear nfc_target before being used (high 8.1)
- [CVE-2022-50655](https://insights.sbomify.com/CVE-2022-50655/): ppp: associate skb with a device at tx (not scored)
- [CVE-2022-50654](https://insights.sbomify.com/CVE-2022-50654/): bpf: Fix panic due to wrong pageattr of im->image (not scored)
- [CVE-2022-50653](https://insights.sbomify.com/CVE-2022-50653/): mmc: atmel-mci: fix return value check of mmc_add_host() (not scored)
- [CVE-2022-50652](https://insights.sbomify.com/CVE-2022-50652/): uio: uio_dmem_genirq: Fix missing unlock in irq configuration (not scored)
- [CVE-2022-50651](https://insights.sbomify.com/CVE-2022-50651/): ethtool: eeprom: fix null-deref on genl_info in dump (not scored)
- [CVE-2022-50650](https://insights.sbomify.com/CVE-2022-50650/): bpf: Fix reference state management for synchronous callbacks (high 7.8)
- [CVE-2022-50649](https://insights.sbomify.com/CVE-2022-50649/): power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (not scored)
- [CVE-2022-50648](https://insights.sbomify.com/CVE-2022-50648/): ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_caller (not scored)
- [CVE-2022-50647](https://insights.sbomify.com/CVE-2022-50647/): RISC-V: Make port I/O string accessors actually work (not scored)
- [CVE-2022-50646](https://insights.sbomify.com/CVE-2022-50646/): scsi: hpsa: Fix possible memory leak in hpsa_init_one() (not scored)
- [CVE-2022-50645](https://insights.sbomify.com/CVE-2022-50645/): EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (not scored)
- [CVE-2022-50644](https://insights.sbomify.com/CVE-2022-50644/): clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (not scored)
- [CVE-2022-50643](https://insights.sbomify.com/CVE-2022-50643/): cifs: Fix xid leak in cifs_copy_file_range() (not scored)
- [CVE-2022-50642](https://insights.sbomify.com/CVE-2022-50642/): platform/chrome: cros_ec_typec: zero out stale pointers (not scored)
- [CVE-2022-50641](https://insights.sbomify.com/CVE-2022-50641/): HSI: omap_ssi: Fix refcount leak in ssi_probe (not scored)
- [CVE-2022-50640](https://insights.sbomify.com/CVE-2022-50640/): mmc: core: Fix kernel panic when remove non-standard SDIO card (not scored)
- [CVE-2022-50639](https://insights.sbomify.com/CVE-2022-50639/): io-wq: Fix memory leak in worker creation (not scored)
- [CVE-2022-50638](https://insights.sbomify.com/CVE-2022-50638/): ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (not scored)
- [CVE-2022-50637](https://insights.sbomify.com/CVE-2022-50637/): cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (not scored)
- [CVE-2022-50636](https://insights.sbomify.com/CVE-2022-50636/): PCI: Fix pci_device_is_present() for VFs by checking PF (not scored)
- [CVE-2022-50635](https://insights.sbomify.com/CVE-2022-50635/): powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (not scored)
- [CVE-2022-50634](https://insights.sbomify.com/CVE-2022-50634/): power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe() (not scored)
- [CVE-2022-50633](https://insights.sbomify.com/CVE-2022-50633/): usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (not scored)
- [CVE-2022-50632](https://insights.sbomify.com/CVE-2022-50632/): drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init() (not scored)
- [CVE-2022-50631](https://insights.sbomify.com/CVE-2022-50631/): RISC-V: kexec: Fix memory leak of fdt buffer (not scored)
- [CVE-2022-50630](https://insights.sbomify.com/CVE-2022-50630/): mm: hugetlb: fix UAF in hugetlb_handle_userfault (high 7.8)
- [CVE-2022-50629](https://insights.sbomify.com/CVE-2022-50629/): wifi: rsi: Fix memory leak in rsi_coex_attach() (not scored)
- [CVE-2022-50628](https://insights.sbomify.com/CVE-2022-50628/): drm/gud: Fix UBSAN warning (not scored)
- [CVE-2022-50627](https://insights.sbomify.com/CVE-2022-50627/): wifi: ath11k: fix monitor mode bringup crash (not scored)
- [CVE-2022-50626](https://insights.sbomify.com/CVE-2022-50626/): media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (not scored)
- [CVE-2022-50625](https://insights.sbomify.com/CVE-2022-50625/): serial: amba-pl011: avoid SBSA UART accessing DMACR register (not scored)
- [CVE-2022-50624](https://insights.sbomify.com/CVE-2022-50624/): net: netsec: fix error handling in netsec_register_mdio() (not scored)
- [CVE-2022-50623](https://insights.sbomify.com/CVE-2022-50623/): fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (high 7.8)
- [CVE-2022-50622](https://insights.sbomify.com/CVE-2022-50622/): ext4: fix potential memory leak in ext4_fc_record_modified_inode() (not scored)
- [CVE-2022-50621](https://insights.sbomify.com/CVE-2022-50621/): dm: verity-loadpin: Only trust verity targets with enforcement (not scored)
- [CVE-2022-50620](https://insights.sbomify.com/CVE-2022-50620/): f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (not scored)
- [CVE-2022-50619](https://insights.sbomify.com/CVE-2022-50619/): drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (not scored)
- [CVE-2022-50618](https://insights.sbomify.com/CVE-2022-50618/): mmc: meson-gx: fix return value check of mmc_add_host() (not scored)
- [CVE-2022-50617](https://insights.sbomify.com/CVE-2022-50617/): drm/amdgpu/powerplay/psm: Fix memory leak in power state init (not scored)
- [CVE-2022-50616](https://insights.sbomify.com/CVE-2022-50616/): regulator: core: Use different devices for resource allocation and DT lookup (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/172/