# Vulnerabilities published in 2022


- [CVE-2022-50497](https://insights.sbomify.com/CVE-2022-50497/): binfmt_misc: fix shift-out-of-bounds in check_special_flags (high 7.1)
- [CVE-2022-50496](https://insights.sbomify.com/CVE-2022-50496/): dm cache: Fix UAF in destroy() (high 7.8)
- [CVE-2022-50494](https://insights.sbomify.com/CVE-2022-50494/): thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (medium 5.5)
- [CVE-2022-50493](https://insights.sbomify.com/CVE-2022-50493/): scsi: qla2xxx: Fix crash when I/O abort times out (high 8.8)
- [CVE-2022-50492](https://insights.sbomify.com/CVE-2022-50492/): drm/msm: fix use-after-free on probe deferral (high 7.8)
- [CVE-2022-50491](https://insights.sbomify.com/CVE-2022-50491/): coresight: cti: Fix hang in cti_disable_hw() (medium 5.5)
- [CVE-2022-50490](https://insights.sbomify.com/CVE-2022-50490/): bpf: Propagate error from htab_lock_bucket() to userspace (high 7.1)
- [CVE-2022-50489](https://insights.sbomify.com/CVE-2022-50489/): drm/mipi-dsi: Detach devices when removing the host (medium 5.5)
- [CVE-2022-50488](https://insights.sbomify.com/CVE-2022-50488/): block, bfq: fix possible uaf for 'bfqq->bic' (high 7.8)
- [CVE-2022-50486](https://insights.sbomify.com/CVE-2022-50486/): net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (medium 5.5)
- [CVE-2022-50485](https://insights.sbomify.com/CVE-2022-50485/): ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (medium 5.5)
- [CVE-2022-50484](https://insights.sbomify.com/CVE-2022-50484/): ALSA: usb-audio: Fix potential memory leaks (medium 5.5)
- [CVE-2022-50483](https://insights.sbomify.com/CVE-2022-50483/): net: enetc: avoid buffer leaks on xdp_do_redirect() failure (high 7.5)
- [CVE-2022-50482](https://insights.sbomify.com/CVE-2022-50482/): iommu/vt-d: Clean up si_domain in the init_dmars() error path (medium 5.5)
- [CVE-2022-50481](https://insights.sbomify.com/CVE-2022-50481/): cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (medium 5.5)
- [CVE-2022-50480](https://insights.sbomify.com/CVE-2022-50480/): memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (medium 5.5)
- [CVE-2022-50479](https://insights.sbomify.com/CVE-2022-50479/): drm/amd: fix potential memory leak (medium 5.5)
- [CVE-2022-50478](https://insights.sbomify.com/CVE-2022-50478/): nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (high 7.1)
- [CVE-2022-50477](https://insights.sbomify.com/CVE-2022-50477/): rtc: class: Fix potential memleak in devm_rtc_allocate_device() (medium 5.5)
- [CVE-2022-50476](https://insights.sbomify.com/CVE-2022-50476/): ntb_netdev: Use dev_kfree_skb_any() in interrupt context (medium 5.5)
- [CVE-2022-50475](https://insights.sbomify.com/CVE-2022-50475/): RDMA/core: Make sure "ib_port" is valid when access sysfs node (medium 5.5)
- [CVE-2022-50474](https://insights.sbomify.com/CVE-2022-50474/): macintosh: fix possible memory leak in macio_add_one_device() (medium 5.5)
- [CVE-2022-50473](https://insights.sbomify.com/CVE-2022-50473/): cpufreq: Init completion before kobject_init_and_add() (medium 5.5)
- [CVE-2022-50472](https://insights.sbomify.com/CVE-2022-50472/): IB/mad: Don't call to function that might sleep while in atomic context (high 7.5)
- [CVE-2022-50471](https://insights.sbomify.com/CVE-2022-50471/): xen/gntdev: Accommodate VMA splitting (medium 5.5)
- [CVE-2022-50470](https://insights.sbomify.com/CVE-2022-50470/): xhci: Remove device endpoints from bandwidth list when freeing the device (high 7.8)
- [CVE-2022-50469](https://insights.sbomify.com/CVE-2022-50469/): staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (medium 5.5)
- [CVE-2022-50468](https://insights.sbomify.com/CVE-2022-50468/): platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (medium 5.5)
- [CVE-2022-50467](https://insights.sbomify.com/CVE-2022-50467/): scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID (medium 5.5)
- [CVE-2022-50466](https://insights.sbomify.com/CVE-2022-50466/): fs/binfmt_elf: Fix memory leak in load_elf_binary() (medium 5.5)
- [CVE-2022-50465](https://insights.sbomify.com/CVE-2022-50465/): ext4: fix leaking uninitialized memory in fast-commit journal (medium 5.5)
- [CVE-2022-50464](https://insights.sbomify.com/CVE-2022-50464/): mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (medium 5.5)
- [CVE-2022-50463](https://insights.sbomify.com/CVE-2022-50463/): powerpc/52xx: Fix a resource leak in an error handling path (medium 5.5)
- [CVE-2022-50462](https://insights.sbomify.com/CVE-2022-50462/): MIPS: vpe-mt: fix possible memory leak while module exiting (medium 5.5)
- [CVE-2022-50461](https://insights.sbomify.com/CVE-2022-50461/): net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open() (medium 5.5)
- [CVE-2022-50460](https://insights.sbomify.com/CVE-2022-50460/): cifs: Fix xid leak in cifs_flock() (medium 5.5)
- [CVE-2022-50459](https://insights.sbomify.com/CVE-2022-50459/): scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (high 7.8)
- [CVE-2022-50458](https://insights.sbomify.com/CVE-2022-50458/): clk: tegra: Fix refcount leak in tegra210_clock_init (medium 5.5)
- [CVE-2022-50457](https://insights.sbomify.com/CVE-2022-50457/): mtd: core: Fix refcount error in del_mtd_device() (medium 5.5)
- [CVE-2022-50456](https://insights.sbomify.com/CVE-2022-50456/): btrfs: fix resolving backrefs for inline extent followed by prealloc (medium 5.5)
- [CVE-2022-50454](https://insights.sbomify.com/CVE-2022-50454/): drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (high 7.8)
- [CVE-2022-50453](https://insights.sbomify.com/CVE-2022-50453/): gpiolib: cdev: fix NULL-pointer dereferences (medium 5.5)
- [CVE-2022-50452](https://insights.sbomify.com/CVE-2022-50452/): net: sched: cake: fix null pointer access issue when cake_init() fails (medium 5.5)
- [CVE-2022-50451](https://insights.sbomify.com/CVE-2022-50451/): fs/ntfs3: Fix memory leak on ntfs_fill_super() error path (medium 5.5)
- [CVE-2022-50449](https://insights.sbomify.com/CVE-2022-50449/): clk: samsung: Fix memory leak in _samsung_clk_register_pll() (medium 5.5)
- [CVE-2022-50448](https://insights.sbomify.com/CVE-2022-50448/): mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in (medium 5.5)
- [CVE-2022-50447](https://insights.sbomify.com/CVE-2022-50447/): Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (medium 5.5)
- [CVE-2022-50446](https://insights.sbomify.com/CVE-2022-50446/): ARC: mm: fix leakage of memory allocated for PTE (medium 5.5)
- [CVE-2022-50445](https://insights.sbomify.com/CVE-2022-50445/): xfrm: Reinject transport-mode packets through workqueue (medium 5.5)
- [CVE-2022-50444](https://insights.sbomify.com/CVE-2022-50444/): clk: tegra20: Fix refcount leak in tegra20_clock_init (medium 5.5)
- [CVE-2022-50443](https://insights.sbomify.com/CVE-2022-50443/): drm/rockchip: lvds: fix PM usage counter unbalance in poweron (medium 5.5)
- [CVE-2022-50442](https://insights.sbomify.com/CVE-2022-50442/): fs/ntfs3: Validate buffer length while parsing index (high 8.4)
- [CVE-2022-50441](https://insights.sbomify.com/CVE-2022-50441/): net/mlx5: Lag, fix failure to cancel delayed bond work (medium 5.5)
- [CVE-2022-50440](https://insights.sbomify.com/CVE-2022-50440/): drm/vmwgfx: Validate the box size for the snooped cursor (high 7.8)
- [CVE-2022-50439](https://insights.sbomify.com/CVE-2022-50439/): ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (medium 5.5)
- [CVE-2022-50438](https://insights.sbomify.com/CVE-2022-50438/): net: hinic: fix memory leak when reading function table (medium 5.5)
- [CVE-2022-50437](https://insights.sbomify.com/CVE-2022-50437/): drm/msm/hdmi: fix memory corruption with too many bridges (high 7.8)
- [CVE-2022-50436](https://insights.sbomify.com/CVE-2022-50436/): ext4: don't set up encryption key during jbd2 transaction (medium 5.5)
- [CVE-2022-50435](https://insights.sbomify.com/CVE-2022-50435/): ext4: avoid crash when inline data creation follows DIO write (medium 5.5)
- [CVE-2022-50434](https://insights.sbomify.com/CVE-2022-50434/): blk-mq: fix possible memleak when register 'hctx' failed (medium 5.5)
- [CVE-2022-50433](https://insights.sbomify.com/CVE-2022-50433/): efi: ssdt: Don't free memory if ACPI table was loaded successfully (high 7.8)
- [CVE-2022-50432](https://insights.sbomify.com/CVE-2022-50432/): kernfs: fix use-after-free in __kernfs_remove (high 7.8)
- [CVE-2022-50431](https://insights.sbomify.com/CVE-2022-50431/): ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (medium 5.5)
- [CVE-2022-50430](https://insights.sbomify.com/CVE-2022-50430/): mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (medium 5.5)
- [CVE-2022-50429](https://insights.sbomify.com/CVE-2022-50429/): memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (medium 5.5)
- [CVE-2022-50428](https://insights.sbomify.com/CVE-2022-50428/): ext4: fix off-by-one errors in fast-commit block filling (medium 5.5)
- [CVE-2022-50427](https://insights.sbomify.com/CVE-2022-50427/): ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (medium 5.5)
- [CVE-2022-50426](https://insights.sbomify.com/CVE-2022-50426/): remoteproc: imx_dsp_rproc: Add mutex protection for workqueue (medium 5.5)
- [CVE-2022-50425](https://insights.sbomify.com/CVE-2022-50425/): x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (medium 5.5)
- [CVE-2022-50424](https://insights.sbomify.com/CVE-2022-50424/): wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability() (medium 5.5)
- [CVE-2022-50423](https://insights.sbomify.com/CVE-2022-50423/): ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (high 7.8)
- [CVE-2022-50422](https://insights.sbomify.com/CVE-2022-50422/): scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (high 7.8)
- [CVE-2022-50421](https://insights.sbomify.com/CVE-2022-50421/): rpmsg: char: Avoid double destroy of default endpoint (high 7.8)
- [CVE-2022-50420](https://insights.sbomify.com/CVE-2022-50420/): crypto: hisilicon/hpre - fix resource leak in remove process (medium 5.5)
- [CVE-2022-50419](https://insights.sbomify.com/CVE-2022-50419/): Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (high 8.8)
- [CVE-2022-50418](https://insights.sbomify.com/CVE-2022-50418/): wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register() (medium 5.5)
- [CVE-2022-50417](https://insights.sbomify.com/CVE-2022-50417/): drm/panfrost: Fix GEM handle creation ref-counting (high 7.8)
- [CVE-2022-50416](https://insights.sbomify.com/CVE-2022-50416/): irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (medium 5.5)
- [CVE-2022-50415](https://insights.sbomify.com/CVE-2022-50415/): parisc: led: Fix potential null-ptr-deref in start_task() (medium 5.5)
- [CVE-2022-50414](https://insights.sbomify.com/CVE-2022-50414/): scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (medium 5.5)
- [CVE-2022-50413](https://insights.sbomify.com/CVE-2022-50413/): wifi: mac80211: fix use-after-free (high 8.8)
- [CVE-2022-50412](https://insights.sbomify.com/CVE-2022-50412/): drm: bridge: adv7511: unregister cec i2c device after cec adapter (high 7.8)
- [CVE-2022-50411](https://insights.sbomify.com/CVE-2022-50411/): ACPICA: Fix error code path in acpi_ds_call_control_method() (high 7.8)
- [CVE-2022-50410](https://insights.sbomify.com/CVE-2022-50410/): NFSD: Protect against send buffer overflow in NFSv2 READ (critical 9.8)
- [CVE-2022-50409](https://insights.sbomify.com/CVE-2022-50409/): net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (medium 5.5)
- [CVE-2022-50408](https://insights.sbomify.com/CVE-2022-50408/): wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (high 7.8)
- [CVE-2022-50407](https://insights.sbomify.com/CVE-2022-50407/): crypto: hisilicon/qm - increase the memory of local variables (medium 5.5)
- [CVE-2022-50406](https://insights.sbomify.com/CVE-2022-50406/): iomap: iomap: fix memory corruption when recording errors during writeback (high 7.8)
- [CVE-2022-50405](https://insights.sbomify.com/CVE-2022-50405/): net/tunnel: wait until all sk_user_data reader finish before releasing the sock (high 7.8)
- [CVE-2022-50404](https://insights.sbomify.com/CVE-2022-50404/): fbdev: fbcon: release buffer when fbcon_do_set_font() failed (medium 5.5)
- [CVE-2022-50402](https://insights.sbomify.com/CVE-2022-50402/): drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (medium 5.5)
- [CVE-2022-50401](https://insights.sbomify.com/CVE-2022-50401/): nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (critical 9.8)
- [CVE-2022-50400](https://insights.sbomify.com/CVE-2022-50400/): staging: greybus: audio_helper: remove unused and wrong debugfs usage (medium 5.5)
- [CVE-2022-50399](https://insights.sbomify.com/CVE-2022-50399/): media: atomisp: prevent integer overflow in sh_css_set_black_frame() (high 7.8)
- [CVE-2022-50398](https://insights.sbomify.com/CVE-2022-50398/): drm/msm/dp: add atomic_check to bridge ops (medium 5.5)
- [CVE-2022-50396](https://insights.sbomify.com/CVE-2022-50396/): net: sched: fix memory leak in tcindex_set_parms (medium 5.5)
- [CVE-2022-50395](https://insights.sbomify.com/CVE-2022-50395/): integrity: Fix memory leakage in keyring allocation error path (medium 5.5)
- [CVE-2022-50394](https://insights.sbomify.com/CVE-2022-50394/): i2c: ismt: Fix an out-of-bounds bug in ismt_access() (high 7.8)
- [CVE-2022-50393](https://insights.sbomify.com/CVE-2022-50393/): drm/amdgpu: SDMA update use unlocked iterator (high 7.8)
- [CVE-2022-50392](https://insights.sbomify.com/CVE-2022-50392/): ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/174/