# Vulnerabilities published in 2022


- [CVE-2022-50287](https://insights.sbomify.com/CVE-2022-50287/): drm/i915/bios: fix a memory leak in generate_lfp_data_ptrs (medium 5.5)
- [CVE-2022-50286](https://insights.sbomify.com/CVE-2022-50286/): ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (high 7.8)
- [CVE-2022-50285](https://insights.sbomify.com/CVE-2022-50285/): mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (medium 5.5)
- [CVE-2022-50284](https://insights.sbomify.com/CVE-2022-50284/): ipc: fix memory leak in init_mqueue_fs() (medium 5.5)
- [CVE-2022-50283](https://insights.sbomify.com/CVE-2022-50283/): mtd: core: add missing of_node_get() in dynamic partitions code (high 7.8)
- [CVE-2022-50282](https://insights.sbomify.com/CVE-2022-50282/): chardev: fix error handling in cdev_device_add() (medium 5.5)
- [CVE-2022-50281](https://insights.sbomify.com/CVE-2022-50281/): MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() (medium 5.5)
- [CVE-2022-50280](https://insights.sbomify.com/CVE-2022-50280/): pnode: terminate at peers of source (medium 5.5)
- [CVE-2022-50279](https://insights.sbomify.com/CVE-2022-50279/): wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (high 7.1)
- [CVE-2022-50278](https://insights.sbomify.com/CVE-2022-50278/): PNP: fix name memory leak in pnp_alloc_dev() (medium 5.5)
- [CVE-2022-50277](https://insights.sbomify.com/CVE-2022-50277/): ext4: don't allow journal inode to have encrypt flag (medium 5.5)
- [CVE-2022-50276](https://insights.sbomify.com/CVE-2022-50276/): power: supply: fix null pointer dereferencing in power_supply_get_battery_info (medium 5.5)
- [CVE-2022-50275](https://insights.sbomify.com/CVE-2022-50275/): drm/radeon: Add the missed acpi_put_table() to fix memory leak (medium 5.5)
- [CVE-2022-50274](https://insights.sbomify.com/CVE-2022-50274/): media: dvbdev: adopts refcnt to avoid UAF (high 7.8)
- [CVE-2022-50273](https://insights.sbomify.com/CVE-2022-50273/): f2fs: fix to do sanity check on destination blkaddr during recovery (medium 5.5)
- [CVE-2022-50272](https://insights.sbomify.com/CVE-2022-50272/): media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (medium 5.5)
- [CVE-2022-50271](https://insights.sbomify.com/CVE-2022-50271/): vhost/vsock: Use kvmalloc/kvfree for larger packets. (medium 5.5)
- [CVE-2022-50270](https://insights.sbomify.com/CVE-2022-50270/): f2fs: fix the assign logic of iocb (high 7.1)
- [CVE-2022-50269](https://insights.sbomify.com/CVE-2022-50269/): drm/vkms: Fix memory leak in vkms_init() (medium 5.5)
- [CVE-2022-50268](https://insights.sbomify.com/CVE-2022-50268/): mmc: moxart: fix return value check of mmc_add_host() (medium 5.5)
- [CVE-2022-50267](https://insights.sbomify.com/CVE-2022-50267/): mmc: rtsx_pci: fix return value check of mmc_add_host() (medium 5.5)
- [CVE-2022-50266](https://insights.sbomify.com/CVE-2022-50266/): kprobes: Fix check for probe enabled in kill_kprobe() (medium 5.5)
- [CVE-2022-50265](https://insights.sbomify.com/CVE-2022-50265/): kcm: annotate data-races around kcm->rx_wait (medium 5.5)
- [CVE-2022-50264](https://insights.sbomify.com/CVE-2022-50264/): clk: socfpga: Fix memory leak in socfpga_gate_init() (medium 5.5)
- [CVE-2022-50263](https://insights.sbomify.com/CVE-2022-50263/): vdpasim: fix memory leak when freeing IOTLBs (medium 5.5)
- [CVE-2022-50262](https://insights.sbomify.com/CVE-2022-50262/): fs/ntfs3: Validate BOOT record_size (medium 5.5)
- [CVE-2022-50261](https://insights.sbomify.com/CVE-2022-50261/): drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (medium 5.5)
- [CVE-2022-50260](https://insights.sbomify.com/CVE-2022-50260/): drm/msm: Make .remove and .shutdown HW shutdown consistent (medium 5.5)
- [CVE-2022-50259](https://insights.sbomify.com/CVE-2022-50259/): bpf, sockmap: fix race in sock_map_free() (high 7.8)
- [CVE-2022-50258](https://insights.sbomify.com/CVE-2022-50258/): wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (high 7.8)
- [CVE-2022-50257](https://insights.sbomify.com/CVE-2022-50257/): xen/gntdev: Prevent leaking grants (medium 5.5)
- [CVE-2022-50256](https://insights.sbomify.com/CVE-2022-50256/): drm/meson: remove drm bridges at aggregate driver unbind time (high 7.8)
- [CVE-2022-50255](https://insights.sbomify.com/CVE-2022-50255/): tracing: Fix reading strings from synthetic events (high 7.8)
- [CVE-2022-50254](https://insights.sbomify.com/CVE-2022-50254/): media: ov8865: Fix an error handling path in ov8865_probe() (medium 5.5)
- [CVE-2022-50253](https://insights.sbomify.com/CVE-2022-50253/): bpf: make sure skb->len != 0 when redirecting to a tunneling device (medium 5.5)
- [CVE-2022-50252](https://insights.sbomify.com/CVE-2022-50252/): igb: Do not free q_vector unless new one was allocated (high 7.8)
- [CVE-2022-50251](https://insights.sbomify.com/CVE-2022-50251/): mmc: vub300: fix return value check of mmc_add_host() (medium 5.5)
- [CVE-2022-50250](https://insights.sbomify.com/CVE-2022-50250/): regulator: core: fix use_count leakage when handling boot-on (medium 5.5)
- [CVE-2022-50249](https://insights.sbomify.com/CVE-2022-50249/): memory: of: Fix refcount leak bug in of_get_ddr_timings() (medium 5.5)
- [CVE-2022-50248](https://insights.sbomify.com/CVE-2022-50248/): wifi: iwlwifi: mvm: fix double free on tx path. (high 7.8)
- [CVE-2022-50247](https://insights.sbomify.com/CVE-2022-50247/): usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (medium 5.5)
- [CVE-2022-50246](https://insights.sbomify.com/CVE-2022-50246/): usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (medium 5.5)
- [CVE-2022-50245](https://insights.sbomify.com/CVE-2022-50245/): rapidio: fix possible UAF when kfifo_alloc() fails (high 7.8)
- [CVE-2022-50244](https://insights.sbomify.com/CVE-2022-50244/): cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (medium 5.5)
- [CVE-2022-50243](https://insights.sbomify.com/CVE-2022-50243/): sctp: handle the error returned from sctp_auth_asoc_init_active_key (high 7.8)
- [CVE-2022-50242](https://insights.sbomify.com/CVE-2022-50242/): drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (medium 5.5)
- [CVE-2022-50241](https://insights.sbomify.com/CVE-2022-50241/): NFSD: fix use-after-free on source server when doing inter-server copy (high 8.8)
- [CVE-2022-50240](https://insights.sbomify.com/CVE-2022-50240/): android: binder: stop saving a pointer to the VMA (high 7.8)
- [CVE-2022-50239](https://insights.sbomify.com/CVE-2022-50239/): cpufreq: qcom: fix writes in read-only memory region (high 7.1)
- [CVE-2022-50238](https://insights.sbomify.com/CVE-2022-50238/): Security feature bypass in Windows (high 7.4)
- [CVE-2022-50237](https://insights.sbomify.com/CVE-2022-50237/): `ed25519-dalek` Double Public Key Signing Function Oracle Attack (medium 5.9)
- [CVE-2022-50236](https://insights.sbomify.com/CVE-2022-50236/): iommu/mediatek: Fix crash on isr after kexec() (medium 5.5)
- [CVE-2022-50235](https://insights.sbomify.com/CVE-2022-50235/): NFSD: Protect against send buffer overflow in NFSv2 READDIR (critical 9.8)
- [CVE-2022-50234](https://insights.sbomify.com/CVE-2022-50234/): io_uring/af_unix: defer registered files gc to io_uring release (high 7.8)
- [CVE-2022-50233](https://insights.sbomify.com/CVE-2022-50233/): Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (high 7.8)
- [CVE-2022-50232](https://insights.sbomify.com/CVE-2022-50232/): arm64: set UXN on swapper page tables (medium 5.5)
- [CVE-2022-50231](https://insights.sbomify.com/CVE-2022-50231/): crypto: arm64/poly1305 - fix a read out-of-bound (high 7.1)
- [CVE-2022-50230](https://insights.sbomify.com/CVE-2022-50230/): arm64: set UXN on swapper page tables (medium 5.5)
- [CVE-2022-50229](https://insights.sbomify.com/CVE-2022-50229/): ALSA: bcd2000: Fix a UAF bug on the error path of probing (high 7.8)
- [CVE-2022-50228](https://insights.sbomify.com/CVE-2022-50228/): KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (medium 5.5)
- [CVE-2022-50227](https://insights.sbomify.com/CVE-2022-50227/): KVM: x86/xen: Initialize Xen timer only once (high 7.8)
- [CVE-2022-50226](https://insights.sbomify.com/CVE-2022-50226/): crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (medium 5.5)
- [CVE-2022-50225](https://insights.sbomify.com/CVE-2022-50225/): riscv:uprobe fix SR_SPIE set/clear handling (medium 5.5)
- [CVE-2022-50224](https://insights.sbomify.com/CVE-2022-50224/): KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT (medium 5.5)
- [CVE-2022-50223](https://insights.sbomify.com/CVE-2022-50223/): LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (medium 5.5)
- [CVE-2022-50222](https://insights.sbomify.com/CVE-2022-50222/): tty: vt: initialize unicode screen buffer (medium 5.5)
- [CVE-2022-50221](https://insights.sbomify.com/CVE-2022-50221/): drm/fb-helper: Fix out-of-bounds access (high 7.8)
- [CVE-2022-50220](https://insights.sbomify.com/CVE-2022-50220/): usbnet: Fix linkwatch use-after-free on disconnect (high 7.8)
- [CVE-2022-50219](https://insights.sbomify.com/CVE-2022-50219/): bpf: Fix KASAN use-after-free Read in compute_effective_progs (high 7.8)
- [CVE-2022-50218](https://insights.sbomify.com/CVE-2022-50218/): iio: light: isl29028: Fix the warning in isl29028_remove() (medium 5.5)
- [CVE-2022-50217](https://insights.sbomify.com/CVE-2022-50217/): fuse: write inode in fuse_release() (medium 5.5)
- [CVE-2022-50215](https://insights.sbomify.com/CVE-2022-50215/): scsi: sg: Allow waiting for commands to complete on removed device (high 7.8)
- [CVE-2022-50214](https://insights.sbomify.com/CVE-2022-50214/): coresight: Clear the connection field properly (high 7.8)
- [CVE-2022-50213](https://insights.sbomify.com/CVE-2022-50213/): netfilter: nf_tables: do not allow SET_ID to refer to another table (high 7.8)
- [CVE-2022-50212](https://insights.sbomify.com/CVE-2022-50212/): netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (high 7.8)
- [CVE-2022-50211](https://insights.sbomify.com/CVE-2022-50211/): md-raid10: fix KASAN warning (high 7.1)
- [CVE-2022-50210](https://insights.sbomify.com/CVE-2022-50210/): MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (medium 5.5)
- [CVE-2022-50209](https://insights.sbomify.com/CVE-2022-50209/): meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (medium 5.5)
- [CVE-2022-50208](https://insights.sbomify.com/CVE-2022-50208/): soc: amlogic: Fix refcount leak in meson-secure-pwrc.c (medium 5.5)
- [CVE-2022-50207](https://insights.sbomify.com/CVE-2022-50207/): ARM: bcm: Fix refcount leak in bcm_kona_smc_init (medium 5.5)
- [CVE-2022-50206](https://insights.sbomify.com/CVE-2022-50206/): arm64: fix oops in concurrently setting insn_emulation sysctls (medium 5.5)
- [CVE-2022-50205](https://insights.sbomify.com/CVE-2022-50205/): ext2: Add more validity checks for inode counts (medium 5.5)
- [CVE-2022-50204](https://insights.sbomify.com/CVE-2022-50204/): ARM: OMAP2+: pdata-quirks: Fix refcount leak bug (medium 5.5)
- [CVE-2022-50203](https://insights.sbomify.com/CVE-2022-50203/): ARM: OMAP2+: display: Fix refcount leak bug (medium 5.5)
- [CVE-2022-50202](https://insights.sbomify.com/CVE-2022-50202/): PM: hibernate: defer device probing when resuming from hibernation (medium 5.5)
- [CVE-2022-50201](https://insights.sbomify.com/CVE-2022-50201/): selinux: fix memleak in security_read_state_kernel() (medium 5.5)
- [CVE-2022-50200](https://insights.sbomify.com/CVE-2022-50200/): selinux: Add boundary check in put_entry() (high 7.8)
- [CVE-2022-50199](https://insights.sbomify.com/CVE-2022-50199/): ARM: OMAP2+: Fix refcount leak in omapdss_init_of (medium 5.5)
- [CVE-2022-50198](https://insights.sbomify.com/CVE-2022-50198/): ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (medium 5.5)
- [CVE-2022-50197](https://insights.sbomify.com/CVE-2022-50197/): cpufreq: zynq: Fix refcount leak in zynq_get_revision (medium 5.5)
- [CVE-2022-50196](https://insights.sbomify.com/CVE-2022-50196/): soc: qcom: ocmem: Fix refcount leak in of_get_ocmem (medium 5.5)
- [CVE-2022-50195](https://insights.sbomify.com/CVE-2022-50195/): ARM: dts: qcom: replace gcc PXO with pxo_board fixed clock (medium 5.5)
- [CVE-2022-50194](https://insights.sbomify.com/CVE-2022-50194/): soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (medium 5.5)
- [CVE-2022-50193](https://insights.sbomify.com/CVE-2022-50193/): erofs: wake up all waiters after z_erofs_lzma_head ready (medium 5.5)
- [CVE-2022-50192](https://insights.sbomify.com/CVE-2022-50192/): spi: tegra20-slink: fix UAF in tegra_slink_remove() (high 7.8)
- [CVE-2022-50191](https://insights.sbomify.com/CVE-2022-50191/): regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (medium 5.5)
- [CVE-2022-50190](https://insights.sbomify.com/CVE-2022-50190/): spi: Fix simplification of devm_spi_register_controller (high 7.8)
- [CVE-2022-50189](https://insights.sbomify.com/CVE-2022-50189/): tools/power turbostat: Fix file pointer leak (high 7.1)
- [CVE-2022-50188](https://insights.sbomify.com/CVE-2022-50188/): drm/meson: Fix refcount leak in meson_encoder_hdmi_init (medium 5.5)
- [CVE-2022-50187](https://insights.sbomify.com/CVE-2022-50187/): ath11k: fix netdev open race (medium 4.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/176/