# Vulnerabilities published in 2022


- [CVE-2022-50615](https://insights.sbomify.com/CVE-2022-50615/): perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (not scored)
- [CVE-2022-50614](https://insights.sbomify.com/CVE-2022-50614/): misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (not scored)
- [CVE-2022-50596](https://insights.sbomify.com/CVE-2022-50596/): D-Link DIR-1260 <= v1.20B05 GetDeviceSettings Unauthenticated Command Injection (critical 9.3)
- [CVE-2022-50595](https://insights.sbomify.com/CVE-2022-50595/): Advantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCE (critical 9.3)
- [CVE-2022-50594](https://insights.sbomify.com/CVE-2022-50594/): Advantech iView < v5.7.04 Build 6425 data Parameter SQL Injection Information Disclosure (high 8.8)
- [CVE-2022-50593](https://insights.sbomify.com/CVE-2022-50593/): Advantech iView < v5.7.04 Build 6425 search_term Parameter SQL Injection RCE (critical 9.3)
- [CVE-2022-50592](https://insights.sbomify.com/CVE-2022-50592/): Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE (critical 9.3)
- [CVE-2022-50591](https://insights.sbomify.com/CVE-2022-50591/): Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information Disclosure (high 8.8)
- [CVE-2022-50590](https://insights.sbomify.com/CVE-2022-50590/): SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality (high 8.8)
- [CVE-2022-50589](https://insights.sbomify.com/CVE-2022-50589/): SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality (critical 9.3)
- [CVE-2022-50588](https://insights.sbomify.com/CVE-2022-50588/): Nagios XI < 5.8.9 Stored XSS in Update Checking (medium 5.1)
- [CVE-2022-50587](https://insights.sbomify.com/CVE-2022-50587/): Nagios XI < 5.8.9 Stored XSS via Command Names in Apply Config Error Text (medium 5.1)
- [CVE-2022-50586](https://insights.sbomify.com/CVE-2022-50586/): Nagios XI < 5.8.9 Stored XSS via BPI Info URL (medium 5.1)
- [CVE-2022-50585](https://insights.sbomify.com/CVE-2022-50585/): Nagios XI < 5.8.9 Core Config Manager (CCM) XSS via Audit Log Page Search Input (medium 5.1)
- [CVE-2022-50584](https://insights.sbomify.com/CVE-2022-50584/): Nagios XI < 5.8.8 Core Config Manager (CCM) XSS via Search & Deletion Flows (medium 5.1)
- [CVE-2022-50583](https://insights.sbomify.com/CVE-2022-50583/): md/raid0, raid10: Don't set discard sectors for request queue (not scored)
- [CVE-2022-50582](https://insights.sbomify.com/CVE-2022-50582/): regulator: core: Prevent integer underflow (not scored)
- [CVE-2022-50581](https://insights.sbomify.com/CVE-2022-50581/): hfs: fix OOB Read in __hfs_brec_find (high 7.8)
- [CVE-2022-50580](https://insights.sbomify.com/CVE-2022-50580/): blk-throttle: prevent overflow while calculating wait time (not scored)
- [CVE-2022-50579](https://insights.sbomify.com/CVE-2022-50579/): arm64: ftrace: fix module PLTs with mcount (not scored)
- [CVE-2022-50578](https://insights.sbomify.com/CVE-2022-50578/): class: fix possible memory leak in __class_register() (not scored)
- [CVE-2022-50577](https://insights.sbomify.com/CVE-2022-50577/): ima: Fix memory leak in __ima_inode_hash() (not scored)
- [CVE-2022-50576](https://insights.sbomify.com/CVE-2022-50576/): serial: pch: Fix PCI device refcount leak in pch_request_dma() (not scored)
- [CVE-2022-50575](https://insights.sbomify.com/CVE-2022-50575/): xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (not scored)
- [CVE-2022-50574](https://insights.sbomify.com/CVE-2022-50574/): drm/omap: dss: Fix refcount leak bugs (not scored)
- [CVE-2022-50573](https://insights.sbomify.com/CVE-2022-50573/): wifi: mt76: mt7915: fix mt7915_rate_txpower_get() resource leaks (not scored)
- [CVE-2022-50572](https://insights.sbomify.com/CVE-2022-50572/): ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (not scored)
- [CVE-2022-50571](https://insights.sbomify.com/CVE-2022-50571/): btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure (not scored)
- [CVE-2022-50570](https://insights.sbomify.com/CVE-2022-50570/): platform/chrome: fix memory corruption in ioctl (high 7.8)
- [CVE-2022-50569](https://insights.sbomify.com/CVE-2022-50569/): xfrm: Update ipcomp_scratches with NULL when freed (high 7.8)
- [CVE-2022-50568](https://insights.sbomify.com/CVE-2022-50568/): usb: gadget: f_hid: fix f_hidg lifetime vs cdev (not scored)
- [CVE-2022-50567](https://insights.sbomify.com/CVE-2022-50567/): fs: jfs: fix shift-out-of-bounds in dbAllocAG (high 7.8)
- [CVE-2022-50566](https://insights.sbomify.com/CVE-2022-50566/): mtd: Fix device name leak when register device failed in add_mtd_device() (not scored)
- [CVE-2022-50565](https://insights.sbomify.com/CVE-2022-50565/): wifi: plfxlc: fix potential memory leak in __lf_x_usb_enable_rx() (not scored)
- [CVE-2022-50564](https://insights.sbomify.com/CVE-2022-50564/): s390/netiucv: Fix return type of netiucv_tx() (not scored)
- [CVE-2022-50563](https://insights.sbomify.com/CVE-2022-50563/): dm thin: Fix UAF in run_timer_softirq() (not scored)
- [CVE-2022-50562](https://insights.sbomify.com/CVE-2022-50562/): tpm: acpi: Call acpi_put_table() to fix memory leak (not scored)
- [CVE-2022-50561](https://insights.sbomify.com/CVE-2022-50561/): iio: fix memory leak in iio_device_register_eventset() (not scored)
- [CVE-2022-50560](https://insights.sbomify.com/CVE-2022-50560/): drm/meson: explicitly remove aggregate driver at module unload time (not scored)
- [CVE-2022-50559](https://insights.sbomify.com/CVE-2022-50559/): clk: imx: scu: fix memleak on platform_device_add() fails (not scored)
- [CVE-2022-50558](https://insights.sbomify.com/CVE-2022-50558/): regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode (not scored)
- [CVE-2022-50557](https://insights.sbomify.com/CVE-2022-50557/): pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions() (not scored)
- [CVE-2022-50556](https://insights.sbomify.com/CVE-2022-50556/): drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (not scored)
- [CVE-2022-50555](https://insights.sbomify.com/CVE-2022-50555/): tipc: fix a null-ptr-deref in tipc_topsrv_accept (high 7.8)
- [CVE-2022-50554](https://insights.sbomify.com/CVE-2022-50554/): blk-mq: avoid double ->queue_rq() because of early timeout (medium 5.5)
- [CVE-2022-50553](https://insights.sbomify.com/CVE-2022-50553/): tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (medium 5.5)
- [CVE-2022-50552](https://insights.sbomify.com/CVE-2022-50552/): blk-mq: use quiesced elevator switch when reinitializing queues (high 7.8)
- [CVE-2022-50551](https://insights.sbomify.com/CVE-2022-50551/): wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (high 7.1)
- [CVE-2022-50550](https://insights.sbomify.com/CVE-2022-50550/): blk-iolatency: Fix memory leak on add_disk() failures (medium 5.5)
- [CVE-2022-50549](https://insights.sbomify.com/CVE-2022-50549/): dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (medium 5.5)
- [CVE-2022-50548](https://insights.sbomify.com/CVE-2022-50548/): media: i2c: hi846: Fix memory leak in hi846_parse_dt() (medium 5.5)
- [CVE-2022-50547](https://insights.sbomify.com/CVE-2022-50547/): media: solo6x10: fix possible memory leak in solo_sysfs_init() (medium 5.5)
- [CVE-2022-50546](https://insights.sbomify.com/CVE-2022-50546/): ext4: fix uninititialized value in 'ext4_evict_inode' (high 7.8)
- [CVE-2022-50545](https://insights.sbomify.com/CVE-2022-50545/): r6040: Fix kmemleak in probe and remove (medium 5.5)
- [CVE-2022-50544](https://insights.sbomify.com/CVE-2022-50544/): usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (medium 5.5)
- [CVE-2022-50543](https://insights.sbomify.com/CVE-2022-50543/): RDMA/rxe: Fix mr->map double free (high 7.8)
- [CVE-2022-50542](https://insights.sbomify.com/CVE-2022-50542/): media: si470x: Fix use-after-free in si470x_int_in_callback() (high 7.8)
- [CVE-2022-50541](https://insights.sbomify.com/CVE-2022-50541/): dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (medium 5.5)
- [CVE-2022-50540](https://insights.sbomify.com/CVE-2022-50540/): dmaengine: qcom-adm: fix wrong sizeof config in slave_config (medium 5.5)
- [CVE-2022-50539](https://insights.sbomify.com/CVE-2022-50539/): ARM: OMAP2+: omap4-common: Fix refcount leak bug (medium 5.5)
- [CVE-2022-50538](https://insights.sbomify.com/CVE-2022-50538/): vme: Fix error not catched in fake_init() (medium 5.5)
- [CVE-2022-50537](https://insights.sbomify.com/CVE-2022-50537/): firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (medium 5.5)
- [CVE-2022-50536](https://insights.sbomify.com/CVE-2022-50536/): bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (high 7.8)
- [CVE-2022-50535](https://insights.sbomify.com/CVE-2022-50535/): drm/amd/display: Fix potential null-deref in dm_resume (medium 5.5)
- [CVE-2022-50534](https://insights.sbomify.com/CVE-2022-50534/): dm thin: Use last transaction's pmd->root when commit failed (medium 5.5)
- [CVE-2022-50533](https://insights.sbomify.com/CVE-2022-50533/): wifi: mac80211: mlme: fix null-ptr deref on failed assoc (medium 5.5)
- [CVE-2022-50532](https://insights.sbomify.com/CVE-2022-50532/): scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (medium 5.5)
- [CVE-2022-50531](https://insights.sbomify.com/CVE-2022-50531/): tipc: fix an information leak in tipc_topsrv_kern_subscr (medium 5.5)
- [CVE-2022-50530](https://insights.sbomify.com/CVE-2022-50530/): blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (medium 5.5)
- [CVE-2022-50529](https://insights.sbomify.com/CVE-2022-50529/): test_firmware: fix memory leak in test_firmware_init() (medium 5.5)
- [CVE-2022-50528](https://insights.sbomify.com/CVE-2022-50528/): drm/amdkfd: Fix memory leakage (high 7.8)
- [CVE-2022-50527](https://insights.sbomify.com/CVE-2022-50527/): drm/amdgpu: Fix size validation for non-exclusive domains (v4) (medium 5.5)
- [CVE-2022-50526](https://insights.sbomify.com/CVE-2022-50526/): drm/msm/dp: fix memory corruption with too many bridges (high 7.8)
- [CVE-2022-50525](https://insights.sbomify.com/CVE-2022-50525/): iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (medium 5.5)
- [CVE-2022-50524](https://insights.sbomify.com/CVE-2022-50524/): iommu/mediatek: Check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2022-50523](https://insights.sbomify.com/CVE-2022-50523/): clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (medium 5.5)
- [CVE-2022-50522](https://insights.sbomify.com/CVE-2022-50522/): mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (low 3.3)
- [CVE-2022-50521](https://insights.sbomify.com/CVE-2022-50521/): platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (medium 5.5)
- [CVE-2022-50520](https://insights.sbomify.com/CVE-2022-50520/): drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (medium 5.5)
- [CVE-2022-50519](https://insights.sbomify.com/CVE-2022-50519/): nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (medium 5.5)
- [CVE-2022-50518](https://insights.sbomify.com/CVE-2022-50518/): parisc: Fix locking in pdc_iodc_print() firmware call (high 7.8)
- [CVE-2022-50517](https://insights.sbomify.com/CVE-2022-50517/): mm/huge_memory: do not clobber swp_entry_t during THP split (high 7.8)
- [CVE-2022-50516](https://insights.sbomify.com/CVE-2022-50516/): fs: dlm: fix invalid derefence of sb_lvbptr (medium 5.5)
- [CVE-2022-50515](https://insights.sbomify.com/CVE-2022-50515/): drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() (medium 5.5)
- [CVE-2022-50514](https://insights.sbomify.com/CVE-2022-50514/): usb: gadget: f_hid: fix refcount leak on error path (medium 5.5)
- [CVE-2022-50513](https://insights.sbomify.com/CVE-2022-50513/): staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (medium 5.5)
- [CVE-2022-50512](https://insights.sbomify.com/CVE-2022-50512/): ext4: fix potential memory leak in ext4_fc_record_regions() (medium 5.5)
- [CVE-2022-50511](https://insights.sbomify.com/CVE-2022-50511/): lib/fonts: fix undefined behavior in bit shift for get_default_font (medium 5.5)
- [CVE-2022-50510](https://insights.sbomify.com/CVE-2022-50510/): perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (medium 5.5)
- [CVE-2022-50509](https://insights.sbomify.com/CVE-2022-50509/): media: coda: Add check for kmalloc (medium 5.5)
- [CVE-2022-50508](https://insights.sbomify.com/CVE-2022-50508/): wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power (high 7.1)
- [CVE-2022-50507](https://insights.sbomify.com/CVE-2022-50507/): fs/ntfs3: Validate data run offset (high 7.8)
- [CVE-2022-50506](https://insights.sbomify.com/CVE-2022-50506/): drbd: only clone bio if we have a backing device (medium 5.5)
- [CVE-2022-50505](https://insights.sbomify.com/CVE-2022-50505/): iommu/amd: Fix pci device refcount leak in ppr_notifier() (medium 5.5)
- [CVE-2022-50504](https://insights.sbomify.com/CVE-2022-50504/): powerpc/rtas: avoid scheduling in rtas_os_term() (medium 5.5)
- [CVE-2022-50503](https://insights.sbomify.com/CVE-2022-50503/): mtd: lpddr2_nvm: Fix possible null-ptr-deref (medium 5.5)
- [CVE-2022-50501](https://insights.sbomify.com/CVE-2022-50501/): media: coda: Add check for dcoda_iram_alloc (medium 5.5)
- [CVE-2022-50500](https://insights.sbomify.com/CVE-2022-50500/): netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (medium 5.5)
- [CVE-2022-50499](https://insights.sbomify.com/CVE-2022-50499/): media: dvb-core: Fix double free in dvb_register_device() (high 7.8)
- [CVE-2022-50498](https://insights.sbomify.com/CVE-2022-50498/): eth: alx: take rtnl_lock on resume (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/173/