# Vulnerabilities published in 2022


- [CVE-2022-50186](https://insights.sbomify.com/CVE-2022-50186/): ath11k: fix missing skb drop on htc_tx_completion error (medium 5.5)
- [CVE-2022-50185](https://insights.sbomify.com/CVE-2022-50185/): drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (high 7.8)
- [CVE-2022-50184](https://insights.sbomify.com/CVE-2022-50184/): drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init (medium 5.5)
- [CVE-2022-50183](https://insights.sbomify.com/CVE-2022-50183/): drm/meson: encoder_cvbs: Fix refcount leak in meson_encoder_cvbs_init (medium 5.5)
- [CVE-2022-50182](https://insights.sbomify.com/CVE-2022-50182/): media: imx-jpeg: Align upwards buffer size (high 7.8)
- [CVE-2022-50181](https://insights.sbomify.com/CVE-2022-50181/): virtio-gpu: fix a missing check to avoid NULL dereference (medium 5.5)
- [CVE-2022-50179](https://insights.sbomify.com/CVE-2022-50179/): ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (high 7.8)
- [CVE-2022-50178](https://insights.sbomify.com/CVE-2022-50178/): wifi: rtw89: 8852a: rfk: fix div 0 exception (medium 5.5)
- [CVE-2022-50177](https://insights.sbomify.com/CVE-2022-50177/): rcutorture: Fix ksoftirqd boosting timing and iteration (medium 5.5)
- [CVE-2022-50176](https://insights.sbomify.com/CVE-2022-50176/): drm/mcde: Fix refcount leak in mcde_dsi_bind (medium 5.5)
- [CVE-2022-50175](https://insights.sbomify.com/CVE-2022-50175/): media: tw686x: Fix memory leak in tw686x_video_init (medium 5.5)
- [CVE-2022-50174](https://insights.sbomify.com/CVE-2022-50174/): net: hinic: avoid kernel hung in hinic_get_stats64() (medium 5.5)
- [CVE-2022-50173](https://insights.sbomify.com/CVE-2022-50173/): drm/msm/mdp5: Fix global state lock backoff (medium 5.5)
- [CVE-2022-50172](https://insights.sbomify.com/CVE-2022-50172/): mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (medium 5.5)
- [CVE-2022-50171](https://insights.sbomify.com/CVE-2022-50171/): crypto: hisilicon/sec - don't sleep when in softirq (high 7.5)
- [CVE-2022-50170](https://insights.sbomify.com/CVE-2022-50170/): kunit: executor: Fix a memory leak on failure in kunit_filter_tests (medium 5.5)
- [CVE-2022-50169](https://insights.sbomify.com/CVE-2022-50169/): wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (high 7.1)
- [CVE-2022-50168](https://insights.sbomify.com/CVE-2022-50168/): bpf, x86: fix freeing of not-finalized bpf_prog_pack (high 7.8)
- [CVE-2022-50167](https://insights.sbomify.com/CVE-2022-50167/): bpf: fix potential 32-bit overflow when accessing ARRAY map element (high 7.8)
- [CVE-2022-50166](https://insights.sbomify.com/CVE-2022-50166/): Bluetooth: When HCI work queue is drained, only queue chained work (medium 5.5)
- [CVE-2022-50165](https://insights.sbomify.com/CVE-2022-50165/): wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (medium 5.5)
- [CVE-2022-50164](https://insights.sbomify.com/CVE-2022-50164/): wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (high 8.8)
- [CVE-2022-50163](https://insights.sbomify.com/CVE-2022-50163/): ax25: fix incorrect dev_tracker usage (high 7.8)
- [CVE-2022-50162](https://insights.sbomify.com/CVE-2022-50162/): wifi: libertas: Fix possible refcount leak in if_usb_probe() (medium 5.5)
- [CVE-2022-50161](https://insights.sbomify.com/CVE-2022-50161/): mtd: maps: Fix refcount leak in of_flash_probe_versatile (medium 5.5)
- [CVE-2022-50160](https://insights.sbomify.com/CVE-2022-50160/): mtd: maps: Fix refcount leak in ap_flash_init (medium 5.5)
- [CVE-2022-50159](https://insights.sbomify.com/CVE-2022-50159/): of: check previous kernel's ima-kexec-buffer against memory bounds (medium 5.5)
- [CVE-2022-50158](https://insights.sbomify.com/CVE-2022-50158/): mtd: partitions: Fix refcount leak in parse_redboot_of (medium 5.5)
- [CVE-2022-50157](https://insights.sbomify.com/CVE-2022-50157/): PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() (medium 5.5)
- [CVE-2022-50156](https://insights.sbomify.com/CVE-2022-50156/): HID: cp2112: prevent a buffer overflow in cp2112_xfer() (high 7.8)
- [CVE-2022-50155](https://insights.sbomify.com/CVE-2022-50155/): mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset (medium 5.5)
- [CVE-2022-50154](https://insights.sbomify.com/CVE-2022-50154/): PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (medium 5.5)
- [CVE-2022-50153](https://insights.sbomify.com/CVE-2022-50153/): usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (medium 5.5)
- [CVE-2022-50152](https://insights.sbomify.com/CVE-2022-50152/): usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (medium 5.5)
- [CVE-2022-50151](https://insights.sbomify.com/CVE-2022-50151/): usb: cdns3: fix random warning message when driver load (high 7.8)
- [CVE-2022-50149](https://insights.sbomify.com/CVE-2022-50149/): driver core: fix potential deadlock in __driver_attach (medium 5.5)
- [CVE-2022-50148](https://insights.sbomify.com/CVE-2022-50148/): kernfs: fix potential NULL dereference in __kernfs_remove (medium 5.5)
- [CVE-2022-50147](https://insights.sbomify.com/CVE-2022-50147/): mm/mempolicy: fix get_nodes out of bound access (high 7.1)
- [CVE-2022-50146](https://insights.sbomify.com/CVE-2022-50146/): PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (medium 5.5)
- [CVE-2022-50145](https://insights.sbomify.com/CVE-2022-50145/): dmaengine: sf-pdma: Add multithread support for a DMA channel (high 7.8)
- [CVE-2022-50144](https://insights.sbomify.com/CVE-2022-50144/): soundwire: revisit driver bind/unbind and callbacks (medium 5.5)
- [CVE-2022-50143](https://insights.sbomify.com/CVE-2022-50143/): intel_th: Fix a resource leak in an error handling path (medium 5.5)
- [CVE-2022-50142](https://insights.sbomify.com/CVE-2022-50142/): intel_th: msu: Fix vmalloced buffers (high 7.8)
- [CVE-2022-50141](https://insights.sbomify.com/CVE-2022-50141/): mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (medium 5.5)
- [CVE-2022-50140](https://insights.sbomify.com/CVE-2022-50140/): memstick/ms_block: Fix a memory leak (medium 5.5)
- [CVE-2022-50139](https://insights.sbomify.com/CVE-2022-50139/): usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() (medium 5.5)
- [CVE-2022-50138](https://insights.sbomify.com/CVE-2022-50138/): RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (medium 5.5)
- [CVE-2022-50137](https://insights.sbomify.com/CVE-2022-50137/): RDMA/irdma: Fix a window for use-after-free (high 7.8)
- [CVE-2022-50136](https://insights.sbomify.com/CVE-2022-50136/): RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (high 7.5)
- [CVE-2022-50135](https://insights.sbomify.com/CVE-2022-50135/): RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup (medium 5.5)
- [CVE-2022-50134](https://insights.sbomify.com/CVE-2022-50134/): RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (medium 5.5)
- [CVE-2022-50133](https://insights.sbomify.com/CVE-2022-50133/): usb: xhci_plat_remove: avoid NULL dereference (medium 5.5)
- [CVE-2022-50132](https://insights.sbomify.com/CVE-2022-50132/): usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() (medium 5.5)
- [CVE-2022-50131](https://insights.sbomify.com/CVE-2022-50131/): HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() (high 7.8)
- [CVE-2022-50130](https://insights.sbomify.com/CVE-2022-50130/): staging: fbtft: core: set smem_len before fb_deferred_io_init call (medium 5.5)
- [CVE-2022-50129](https://insights.sbomify.com/CVE-2022-50129/): RDMA/srpt: Fix a use-after-free (high 7.0)
- [CVE-2022-50127](https://insights.sbomify.com/CVE-2022-50127/): RDMA/rxe: Fix error unwind in rxe_create_qp() (medium 5.5)
- [CVE-2022-50126](https://insights.sbomify.com/CVE-2022-50126/): jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted (medium 5.5)
- [CVE-2022-50125](https://insights.sbomify.com/CVE-2022-50125/): ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe (medium 5.5)
- [CVE-2022-50124](https://insights.sbomify.com/CVE-2022-50124/): ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (medium 5.5)
- [CVE-2022-50123](https://insights.sbomify.com/CVE-2022-50123/): ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe (medium 5.5)
- [CVE-2022-50122](https://insights.sbomify.com/CVE-2022-50122/): ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe (medium 5.5)
- [CVE-2022-50121](https://insights.sbomify.com/CVE-2022-50121/): remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init (medium 5.5)
- [CVE-2022-50120](https://insights.sbomify.com/CVE-2022-50120/): remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init (medium 5.5)
- [CVE-2022-50119](https://insights.sbomify.com/CVE-2022-50119/): rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (medium 5.5)
- [CVE-2022-50118](https://insights.sbomify.com/CVE-2022-50118/): powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable (medium 5.5)
- [CVE-2022-50117](https://insights.sbomify.com/CVE-2022-50117/): vfio: Split migration ops from main device ops (medium 5.5)
- [CVE-2022-50116](https://insights.sbomify.com/CVE-2022-50116/): tty: n_gsm: fix deadlock and link starvation in outgoing data path (medium 5.5)
- [CVE-2022-50115](https://insights.sbomify.com/CVE-2022-50115/): ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes (high 7.8)
- [CVE-2022-50114](https://insights.sbomify.com/CVE-2022-50114/): net: 9p: fix refcount leak in p9_read_work() error handling (medium 5.5)
- [CVE-2022-50113](https://insights.sbomify.com/CVE-2022-50113/): ASoc: audio-graph-card2: Fix refcount leak bug in __graph_get_type() (medium 5.5)
- [CVE-2022-50112](https://insights.sbomify.com/CVE-2022-50112/): rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (medium 5.5)
- [CVE-2022-50111](https://insights.sbomify.com/CVE-2022-50111/): ASoC: mt6359: Fix refcount leak bug (medium 5.5)
- [CVE-2022-50110](https://insights.sbomify.com/CVE-2022-50110/): watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource (medium 5.5)
- [CVE-2022-50109](https://insights.sbomify.com/CVE-2022-50109/): video: fbdev: amba-clcd: Fix refcount leak bugs (medium 5.5)
- [CVE-2022-50108](https://insights.sbomify.com/CVE-2022-50108/): mfd: max77620: Fix refcount leak in max77620_initialise_fps (medium 5.5)
- [CVE-2022-50107](https://insights.sbomify.com/CVE-2022-50107/): cifs: Fix memory leak when using fscache (medium 5.5)
- [CVE-2022-50106](https://insights.sbomify.com/CVE-2022-50106/): powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address (medium 5.5)
- [CVE-2022-50105](https://insights.sbomify.com/CVE-2022-50105/): powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader (medium 5.5)
- [CVE-2022-50104](https://insights.sbomify.com/CVE-2022-50104/): powerpc/xive: Fix refcount leak in xive_get_max_prio (medium 5.5)
- [CVE-2022-50103](https://insights.sbomify.com/CVE-2022-50103/): sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (high 7.1)
- [CVE-2022-50102](https://insights.sbomify.com/CVE-2022-50102/): video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (medium 5.5)
- [CVE-2022-50101](https://insights.sbomify.com/CVE-2022-50101/): video: fbdev: vt8623fb: Check the size of screen before memset_io() (high 7.8)
- [CVE-2022-50100](https://insights.sbomify.com/CVE-2022-50100/): sched/core: Do not requeue task on CPU excluded from cpus_mask (medium 5.5)
- [CVE-2022-50099](https://insights.sbomify.com/CVE-2022-50099/): video: fbdev: arkfb: Check the size of screen before memset_io() (high 7.8)
- [CVE-2022-50098](https://insights.sbomify.com/CVE-2022-50098/): scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (high 8.8)
- [CVE-2022-50097](https://insights.sbomify.com/CVE-2022-50097/): video: fbdev: s3fb: Check the size of screen before memset_io() (high 7.1)
- [CVE-2022-50096](https://insights.sbomify.com/CVE-2022-50096/): x86/kprobes: Update kcb status flag after singlestepping (medium 5.5)
- [CVE-2022-50095](https://insights.sbomify.com/CVE-2022-50095/): posix-cpu-timers: Cleanup CPU timers before freeing them during exec (high 7.8)
- [CVE-2022-50094](https://insights.sbomify.com/CVE-2022-50094/): spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (high 7.1)
- [CVE-2022-50093](https://insights.sbomify.com/CVE-2022-50093/): iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (high 7.1)
- [CVE-2022-50092](https://insights.sbomify.com/CVE-2022-50092/): dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (medium 5.5)
- [CVE-2022-50091](https://insights.sbomify.com/CVE-2022-50091/): locking/csd_lock: Change csdlock_debug from early_param to __setup (medium 5.5)
- [CVE-2022-50090](https://insights.sbomify.com/CVE-2022-50090/): btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size (high 7.8)
- [CVE-2022-50089](https://insights.sbomify.com/CVE-2022-50089/): btrfs: ensure pages are unlocked on cow_file_range() failure (medium 5.5)
- [CVE-2022-50088](https://insights.sbomify.com/CVE-2022-50088/): mm/damon/reclaim: fix potential memory leak in damon_reclaim_init() (medium 5.5)
- [CVE-2022-50087](https://insights.sbomify.com/CVE-2022-50087/): firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (high 7.8)
- [CVE-2022-50086](https://insights.sbomify.com/CVE-2022-50086/): block: don't allow the same type rq_qos add more than once (medium 5.5)
- [CVE-2022-50085](https://insights.sbomify.com/CVE-2022-50085/): dm raid: fix address sanitizer warning in raid_resume (high 7.8)
- [CVE-2022-50084](https://insights.sbomify.com/CVE-2022-50084/): dm raid: fix address sanitizer warning in raid_status (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/177/