# Vulnerabilities published in 2022


- [CVE-2022-50391](https://insights.sbomify.com/CVE-2022-50391/): mm/mempolicy: fix memory leak in set_mempolicy_home_node system call (medium 5.5)
- [CVE-2022-50390](https://insights.sbomify.com/CVE-2022-50390/): drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (medium 5.5)
- [CVE-2022-50389](https://insights.sbomify.com/CVE-2022-50389/): tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (medium 5.5)
- [CVE-2022-50388](https://insights.sbomify.com/CVE-2022-50388/): nvme: fix multipath crash caused by flush request when blktrace is enabled (medium 5.5)
- [CVE-2022-50387](https://insights.sbomify.com/CVE-2022-50387/): net: hinic: fix the issue of CMDQ memory leaks (medium 5.5)
- [CVE-2022-50386](https://insights.sbomify.com/CVE-2022-50386/): Bluetooth: L2CAP: Fix user-after-free (high 8.8)
- [CVE-2022-50385](https://insights.sbomify.com/CVE-2022-50385/): NFS: Fix an Oops in nfs_d_automount() (medium 5.5)
- [CVE-2022-50384](https://insights.sbomify.com/CVE-2022-50384/): staging: vme_user: Fix possible UAF in tsi148_dma_list_add (high 7.8)
- [CVE-2022-50383](https://insights.sbomify.com/CVE-2022-50383/): media: mediatek: vcodec: Can't set dst buffer to done when lat decode error (medium 5.5)
- [CVE-2022-50382](https://insights.sbomify.com/CVE-2022-50382/): padata: Always leave BHs disabled when running ->parallel() (medium 5.5)
- [CVE-2022-50381](https://insights.sbomify.com/CVE-2022-50381/): md: fix a crash in mempool_free (medium 5.5)
- [CVE-2022-50380](https://insights.sbomify.com/CVE-2022-50380/): mm: /proc/pid/smaps_rollup: fix no vma's null-deref (medium 5.5)
- [CVE-2022-50379](https://insights.sbomify.com/CVE-2022-50379/): btrfs: fix race between quota enable and quota rescan ioctl (medium 4.7)
- [CVE-2022-50378](https://insights.sbomify.com/CVE-2022-50378/): drm/meson: reorder driver deinit sequence to fix use-after-free bug (high 7.8)
- [CVE-2022-50376](https://insights.sbomify.com/CVE-2022-50376/): orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (medium 5.5)
- [CVE-2022-50375](https://insights.sbomify.com/CVE-2022-50375/): tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (medium 5.5)
- [CVE-2022-50374](https://insights.sbomify.com/CVE-2022-50374/): Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (medium 5.5)
- [CVE-2022-50373](https://insights.sbomify.com/CVE-2022-50373/): fs: dlm: fix race in lowcomms (critical 9.8)
- [CVE-2022-50372](https://insights.sbomify.com/CVE-2022-50372/): cifs: Fix memory leak when build ntlmssp negotiate blob failed (medium 5.5)
- [CVE-2022-50371](https://insights.sbomify.com/CVE-2022-50371/): led: qcom-lpg: Fix sleeping in atomic (medium 5.5)
- [CVE-2022-50370](https://insights.sbomify.com/CVE-2022-50370/): i2c: designware: Fix handling of real but unexpected device interrupts (medium 5.5)
- [CVE-2022-50369](https://insights.sbomify.com/CVE-2022-50369/): drm/vkms: Fix null-ptr-deref in vkms_release() (medium 5.5)
- [CVE-2022-50368](https://insights.sbomify.com/CVE-2022-50368/): drm/msm/dsi: fix memory corruption with too many bridges (high 7.8)
- [CVE-2022-50367](https://insights.sbomify.com/CVE-2022-50367/): fs: fix UAF/GPF bug in nilfs_mdt_destroy (high 7.8)
- [CVE-2022-50366](https://insights.sbomify.com/CVE-2022-50366/): powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (high 7.1)
- [CVE-2022-50365](https://insights.sbomify.com/CVE-2022-50365/): skbuff: Account for tail adjustment during pull operations (high 7.5)
- [CVE-2022-50364](https://insights.sbomify.com/CVE-2022-50364/): i2c: mux: reg: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2022-50363](https://insights.sbomify.com/CVE-2022-50363/): skmsg: pass gfp argument to alloc_sk_msg() (critical 9.8)
- [CVE-2022-50362](https://insights.sbomify.com/CVE-2022-50362/): dmaengine: hisilicon: Add multi-thread support for a DMA channel (high 7.8)
- [CVE-2022-50361](https://insights.sbomify.com/CVE-2022-50361/): wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init() (medium 5.5)
- [CVE-2022-50360](https://insights.sbomify.com/CVE-2022-50360/): drm/msm/dp: fix aux-bus EP lifetime (medium 5.5)
- [CVE-2022-50359](https://insights.sbomify.com/CVE-2022-50359/): media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (medium 5.5)
- [CVE-2022-50358](https://insights.sbomify.com/CVE-2022-50358/): brcmfmac: return error when getting invalid max_flowrings from dongle (medium 4.2)
- [CVE-2022-50357](https://insights.sbomify.com/CVE-2022-50357/): usb: dwc3: core: fix some leaks in probe (medium 5.5)
- [CVE-2022-50356](https://insights.sbomify.com/CVE-2022-50356/): net: sched: sfb: fix null pointer access issue when sfb_init() fails (medium 5.5)
- [CVE-2022-50355](https://insights.sbomify.com/CVE-2022-50355/): staging: vt6655: fix some erroneous memory clean-up loops (high 7.8)
- [CVE-2022-50354](https://insights.sbomify.com/CVE-2022-50354/): drm/amdkfd: Fix kfd_process_device_init_vm error handling (high 7.8)
- [CVE-2022-50353](https://insights.sbomify.com/CVE-2022-50353/): mmc: wmt-sdmmc: fix return value check of mmc_add_host() (medium 5.5)
- [CVE-2022-50352](https://insights.sbomify.com/CVE-2022-50352/): net: hns: fix possible memory leak in hnae_ae_register() (medium 5.5)
- [CVE-2022-50351](https://insights.sbomify.com/CVE-2022-50351/): cifs: Fix xid leak in cifs_create() (medium 5.5)
- [CVE-2022-50350](https://insights.sbomify.com/CVE-2022-50350/): scsi: target: iscsi: Fix a race condition between login_work and the login thread (critical 9.8)
- [CVE-2022-50349](https://insights.sbomify.com/CVE-2022-50349/): misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (medium 5.5)
- [CVE-2022-50348](https://insights.sbomify.com/CVE-2022-50348/): nfsd: Fix a memory leak in an error handling path (medium 5.5)
- [CVE-2022-50347](https://insights.sbomify.com/CVE-2022-50347/): mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (medium 5.5)
- [CVE-2022-50346](https://insights.sbomify.com/CVE-2022-50346/): ext4: init quota for 'old.inode' in 'ext4_rename' (medium 5.5)
- [CVE-2022-50344](https://insights.sbomify.com/CVE-2022-50344/): ext4: fix null-ptr-deref in ext4_write_info (medium 5.5)
- [CVE-2022-50343](https://insights.sbomify.com/CVE-2022-50343/): rapidio: fix possible name leaks when rio_add_device() fails (medium 5.5)
- [CVE-2022-50342](https://insights.sbomify.com/CVE-2022-50342/): floppy: Fix memory leak in do_floppy_init() (medium 5.5)
- [CVE-2022-50341](https://insights.sbomify.com/CVE-2022-50341/): cifs: fix oops during encryption (high 7.8)
- [CVE-2022-50340](https://insights.sbomify.com/CVE-2022-50340/): media: vimc: Fix wrong function called when vimc_init() fails (medium 5.5)
- [CVE-2022-50339](https://insights.sbomify.com/CVE-2022-50339/): Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev() (high 7.8)
- [CVE-2022-50337](https://insights.sbomify.com/CVE-2022-50337/): ocxl: fix pci device refcount leak when calling get_function_0() (medium 5.5)
- [CVE-2022-50336](https://insights.sbomify.com/CVE-2022-50336/): fs/ntfs3: Add null pointer check to attr_load_runs_vcn (medium 5.5)
- [CVE-2022-50335](https://insights.sbomify.com/CVE-2022-50335/): 9p: set req refcount to zero to avoid uninitialized usage (critical 9.8)
- [CVE-2022-50334](https://insights.sbomify.com/CVE-2022-50334/): hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (medium 5.5)
- [CVE-2022-50333](https://insights.sbomify.com/CVE-2022-50333/): fs: jfs: fix shift-out-of-bounds in dbDiscardAG (high 7.8)
- [CVE-2022-50332](https://insights.sbomify.com/CVE-2022-50332/): video/aperture: Call sysfb_disable() before removing PCI devices (medium 5.5)
- [CVE-2022-50331](https://insights.sbomify.com/CVE-2022-50331/): wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (medium 5.5)
- [CVE-2022-50330](https://insights.sbomify.com/CVE-2022-50330/): crypto: cavium - prevent integer overflow loading firmware (high 7.1)
- [CVE-2022-50329](https://insights.sbomify.com/CVE-2022-50329/): block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (high 7.8)
- [CVE-2022-50328](https://insights.sbomify.com/CVE-2022-50328/): jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (high 7.8)
- [CVE-2022-50327](https://insights.sbomify.com/CVE-2022-50327/): ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (medium 5.5)
- [CVE-2022-50326](https://insights.sbomify.com/CVE-2022-50326/): media: airspy: fix memory leak in airspy probe (medium 5.5)
- [CVE-2022-50325](https://insights.sbomify.com/CVE-2022-50325/): ASoC: Intel: avs: Fix potential RX buffer overflow (high 7.8)
- [CVE-2022-50324](https://insights.sbomify.com/CVE-2022-50324/): mtd: maps: pxa2xx-flash: fix memory leak in probe (medium 5.5)
- [CVE-2022-50323](https://insights.sbomify.com/CVE-2022-50323/): net: do not sense pfmemalloc status in skb_append_pagefrags() (medium 5.5)
- [CVE-2022-50322](https://insights.sbomify.com/CVE-2022-50322/): rtc: msc313: Fix function prototype mismatch in msc313_rtc_probe() (medium 5.5)
- [CVE-2022-50321](https://insights.sbomify.com/CVE-2022-50321/): wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (medium 5.5)
- [CVE-2022-50320](https://insights.sbomify.com/CVE-2022-50320/): ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address (high 7.8)
- [CVE-2022-50319](https://insights.sbomify.com/CVE-2022-50319/): coresight: trbe: remove cpuhp instance node before remove cpuhp state (medium 5.5)
- [CVE-2022-50318](https://insights.sbomify.com/CVE-2022-50318/): perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (medium 5.5)
- [CVE-2022-50317](https://insights.sbomify.com/CVE-2022-50317/): drm/bridge: megachips: Fix a null pointer dereference bug (medium 5.5)
- [CVE-2022-50316](https://insights.sbomify.com/CVE-2022-50316/): orangefs: Fix kmemleak in orangefs_sysfs_init() (medium 5.5)
- [CVE-2022-50315](https://insights.sbomify.com/CVE-2022-50315/): ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (high 7.8)
- [CVE-2022-50314](https://insights.sbomify.com/CVE-2022-50314/): nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (medium 5.5)
- [CVE-2022-50313](https://insights.sbomify.com/CVE-2022-50313/): erofs: fix order >= MAX_ORDER warning due to crafted negative i_size (medium 5.5)
- [CVE-2022-50312](https://insights.sbomify.com/CVE-2022-50312/): drivers: serial: jsm: fix some leaks in probe (medium 5.5)
- [CVE-2022-50311](https://insights.sbomify.com/CVE-2022-50311/): cxl: Fix refcount leak in cxl_calc_capp_routing (medium 5.5)
- [CVE-2022-50310](https://insights.sbomify.com/CVE-2022-50310/): ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed (high 7.8)
- [CVE-2022-50309](https://insights.sbomify.com/CVE-2022-50309/): media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (medium 5.5)
- [CVE-2022-50308](https://insights.sbomify.com/CVE-2022-50308/): ASoC: qcom: Add checks for devm_kcalloc (medium 5.5)
- [CVE-2022-50307](https://insights.sbomify.com/CVE-2022-50307/): s390/cio: fix out-of-bounds access on cio_ignore free (high 7.1)
- [CVE-2022-50306](https://insights.sbomify.com/CVE-2022-50306/): ext4: fix potential out of bound read in ext4_fc_replay_scan() (high 7.1)
- [CVE-2022-50305](https://insights.sbomify.com/CVE-2022-50305/): ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() (high 7.8)
- [CVE-2022-50304](https://insights.sbomify.com/CVE-2022-50304/): mtd: core: fix possible resource leak in init_mtd() (medium 5.5)
- [CVE-2022-50303](https://insights.sbomify.com/CVE-2022-50303/): drm/amdkfd: Fix double release compute pasid (high 7.8)
- [CVE-2022-50302](https://insights.sbomify.com/CVE-2022-50302/): lockd: set other missing fields when unlocking files (high 7.5)
- [CVE-2022-50301](https://insights.sbomify.com/CVE-2022-50301/): iommu/omap: Fix buffer overflow in debugfs (high 7.8)
- [CVE-2022-50300](https://insights.sbomify.com/CVE-2022-50300/): btrfs: fix extent map use-after-free when handling missing device in read_one_chunk (high 7.8)
- [CVE-2022-50299](https://insights.sbomify.com/CVE-2022-50299/): md: Replace snprintf with scnprintf (medium 5.5)
- [CVE-2022-50298](https://insights.sbomify.com/CVE-2022-50298/): slimbus: qcom-ngd: cleanup in probe error path (medium 5.5)
- [CVE-2022-50297](https://insights.sbomify.com/CVE-2022-50297/): wifi: ath9k: verify the expected usb_endpoints are present (medium 5.5)
- [CVE-2022-50296](https://insights.sbomify.com/CVE-2022-50296/): UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (medium 5.5)
- [CVE-2022-50295](https://insights.sbomify.com/CVE-2022-50295/): io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd() (medium 5.5)
- [CVE-2022-50294](https://insights.sbomify.com/CVE-2022-50294/): wifi: libertas: fix memory leak in lbs_init_adapter() (medium 5.5)
- [CVE-2022-50293](https://insights.sbomify.com/CVE-2022-50293/): btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (medium 5.5)
- [CVE-2022-50292](https://insights.sbomify.com/CVE-2022-50292/): drm/msm/dp: fix bridge lifetime (medium 5.5)
- [CVE-2022-50291](https://insights.sbomify.com/CVE-2022-50291/): kcm: annotate data-races around kcm->rx_psock (medium 5.5)
- [CVE-2022-50289](https://insights.sbomify.com/CVE-2022-50289/): ocfs2: fix memory leak in ocfs2_stack_glue_init() (medium 5.5)
- [CVE-2022-50288](https://insights.sbomify.com/CVE-2022-50288/): qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/175/