# Vulnerabilities published in 2022


- [CVE-2022-50082](https://insights.sbomify.com/CVE-2022-50082/): ext4: fix warning in ext4_iomap_begin as race between bmap and write (high 7.0)
- [CVE-2022-50080](https://insights.sbomify.com/CVE-2022-50080/): tee: add overflow check in register_shm_helper() (medium 5.5)
- [CVE-2022-50079](https://insights.sbomify.com/CVE-2022-50079/): drm/amd/display: Check correct bounds for stream encoder instances for DCN303 (high 7.0)
- [CVE-2022-50078](https://insights.sbomify.com/CVE-2022-50078/): tracing/eprobes: Do not allow eprobes to use $stack, or % for regs (medium 5.5)
- [CVE-2022-50077](https://insights.sbomify.com/CVE-2022-50077/): apparmor: fix reference count leak in aa_pivotroot() (medium 5.5)
- [CVE-2022-50076](https://insights.sbomify.com/CVE-2022-50076/): cifs: Fix memory leak on the deferred close (medium 5.5)
- [CVE-2022-50075](https://insights.sbomify.com/CVE-2022-50075/): tracing/eprobes: Have event probes be consistent with kprobes and uprobes (medium 5.5)
- [CVE-2022-50074](https://insights.sbomify.com/CVE-2022-50074/): apparmor: Fix memleak in aa_simple_write_to_buffer() (medium 5.5)
- [CVE-2022-50073](https://insights.sbomify.com/CVE-2022-50073/): net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (medium 5.5)
- [CVE-2022-50072](https://insights.sbomify.com/CVE-2022-50072/): NFSv4/pnfs: Fix a use-after-free bug in open (high 7.8)
- [CVE-2022-50071](https://insights.sbomify.com/CVE-2022-50071/): mptcp: move subflow cleanup in mptcp_destroy_common() (high 7.8)
- [CVE-2022-50070](https://insights.sbomify.com/CVE-2022-50070/): mptcp: do not queue data on closed subflows (high 7.8)
- [CVE-2022-50069](https://insights.sbomify.com/CVE-2022-50069/): BPF: Fix potential bad pointer dereference in bpf_sys_bpf() (medium 5.5)
- [CVE-2022-50068](https://insights.sbomify.com/CVE-2022-50068/): drm/ttm: Fix dummy res NULL ptr deref bug (medium 5.5)
- [CVE-2022-50067](https://insights.sbomify.com/CVE-2022-50067/): btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (high 7.8)
- [CVE-2022-50066](https://insights.sbomify.com/CVE-2022-50066/): net: atlantic: fix aq_vec index out of range error (high 7.8)
- [CVE-2022-50065](https://insights.sbomify.com/CVE-2022-50065/): virtio_net: fix memory leak inside XPD_TX with mergeable (medium 5.5)
- [CVE-2022-50064](https://insights.sbomify.com/CVE-2022-50064/): virtio-blk: Avoid use-after-free on suspend/resume (high 7.8)
- [CVE-2022-50063](https://insights.sbomify.com/CVE-2022-50063/): net: dsa: felix: suppress non-changes to the tagging protocol (medium 5.5)
- [CVE-2022-50062](https://insights.sbomify.com/CVE-2022-50062/): net: bgmac: Fix a BUG triggered by wrong bytes_compl (high 7.5)
- [CVE-2022-50061](https://insights.sbomify.com/CVE-2022-50061/): pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (medium 5.5)
- [CVE-2022-50060](https://insights.sbomify.com/CVE-2022-50060/): octeontx2-af: Fix mcam entry resource leak (medium 5.5)
- [CVE-2022-50059](https://insights.sbomify.com/CVE-2022-50059/): ceph: don't leak snap_rwsem in handle_cap_grant (high 7.5)
- [CVE-2022-50058](https://insights.sbomify.com/CVE-2022-50058/): vdpa_sim_blk: set number of address spaces and virtqueue groups (medium 5.5)
- [CVE-2022-50057](https://insights.sbomify.com/CVE-2022-50057/): fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr (medium 5.5)
- [CVE-2022-50056](https://insights.sbomify.com/CVE-2022-50056/): fs/ntfs3: Fix missing i_op in ntfs_read_mft (medium 5.5)
- [CVE-2022-50055](https://insights.sbomify.com/CVE-2022-50055/): iavf: Fix adminq error handling (medium 5.5)
- [CVE-2022-50054](https://insights.sbomify.com/CVE-2022-50054/): iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (medium 5.5)
- [CVE-2022-50053](https://insights.sbomify.com/CVE-2022-50053/): iavf: Fix reset error handling (medium 5.5)
- [CVE-2022-50052](https://insights.sbomify.com/CVE-2022-50052/): ASoC: Intel: avs: Fix potential buffer overflow by snprintf() (high 7.8)
- [CVE-2022-50051](https://insights.sbomify.com/CVE-2022-50051/): ASoC: SOF: debug: Fix potential buffer overflow by snprintf() (high 7.8)
- [CVE-2022-50050](https://insights.sbomify.com/CVE-2022-50050/): ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() (high 7.8)
- [CVE-2022-50049](https://insights.sbomify.com/CVE-2022-50049/): ASoC: DPCM: Don't pick up BE without substream (medium 5.5)
- [CVE-2022-50048](https://insights.sbomify.com/CVE-2022-50048/): netfilter: nf_tables: possible module reference underflow in error path (high 7.8)
- [CVE-2022-50047](https://insights.sbomify.com/CVE-2022-50047/): net: dsa: mv88e6060: prevent crash on an unused port (medium 5.5)
- [CVE-2022-50046](https://insights.sbomify.com/CVE-2022-50046/): net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() (medium 5.5)
- [CVE-2022-50045](https://insights.sbomify.com/CVE-2022-50045/): powerpc/pci: Fix get_phb_number() locking (medium 5.5)
- [CVE-2022-50044](https://insights.sbomify.com/CVE-2022-50044/): net: qrtr: start MHI channel after endpoit creation (medium 4.7)
- [CVE-2022-50043](https://insights.sbomify.com/CVE-2022-50043/): net: fix potential refcount leak in ndisc_router_discovery() (medium 5.5)
- [CVE-2022-50042](https://insights.sbomify.com/CVE-2022-50042/): net: genl: fix error path memory leak in policy dumping (medium 5.5)
- [CVE-2022-50041](https://insights.sbomify.com/CVE-2022-50041/): ice: Fix call trace with null VSI during VF reset (medium 5.5)
- [CVE-2022-50040](https://insights.sbomify.com/CVE-2022-50040/): net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() (high 7.8)
- [CVE-2022-50039](https://insights.sbomify.com/CVE-2022-50039/): stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() (medium 5.5)
- [CVE-2022-50038](https://insights.sbomify.com/CVE-2022-50038/): drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (medium 5.5)
- [CVE-2022-50037](https://insights.sbomify.com/CVE-2022-50037/): drm/i915/ttm: don't leak the ccs state (medium 5.5)
- [CVE-2022-50036](https://insights.sbomify.com/CVE-2022-50036/): drm/sun4i: dsi: Prevent underflow when computing packet sizes (medium 5.5)
- [CVE-2022-50035](https://insights.sbomify.com/CVE-2022-50035/): drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex (high 7.8)
- [CVE-2022-50034](https://insights.sbomify.com/CVE-2022-50034/): usb: cdns3 fix use-after-free at workaround 2 (high 7.8)
- [CVE-2022-50033](https://insights.sbomify.com/CVE-2022-50033/): usb: host: ohci-ppc-of: Fix refcount leak bug (medium 5.5)
- [CVE-2022-50032](https://insights.sbomify.com/CVE-2022-50032/): usb: renesas: Fix refcount leak bug (medium 5.5)
- [CVE-2022-50030](https://insights.sbomify.com/CVE-2022-50030/): scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (high 7.8)
- [CVE-2022-50029](https://insights.sbomify.com/CVE-2022-50029/): clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (medium 5.5)
- [CVE-2022-50028](https://insights.sbomify.com/CVE-2022-50028/): gadgetfs: ep_io - wait until IRQ finishes (high 7.8)
- [CVE-2022-50027](https://insights.sbomify.com/CVE-2022-50027/): scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (medium 5.5)
- [CVE-2022-50026](https://insights.sbomify.com/CVE-2022-50026/): habanalabs/gaudi: fix shift out of bounds (high 7.1)
- [CVE-2022-50025](https://insights.sbomify.com/CVE-2022-50025/): cxl: Fix a memory leak in an error handling path (medium 5.5)
- [CVE-2022-50024](https://insights.sbomify.com/CVE-2022-50024/): dmaengine: dw-axi-dmac: do not print NULL LLI during error (medium 5.5)
- [CVE-2022-50023](https://insights.sbomify.com/CVE-2022-50023/): dmaengine: dw-axi-dmac: ignore interrupt if no descriptor (medium 5.5)
- [CVE-2022-50022](https://insights.sbomify.com/CVE-2022-50022/): drivers:md:fix a potential use-after-free bug (high 7.8)
- [CVE-2022-50021](https://insights.sbomify.com/CVE-2022-50021/): ext4: block range must be validated before use in ext4_mb_clear_bb() (high 7.8)
- [CVE-2022-50020](https://insights.sbomify.com/CVE-2022-50020/): ext4: avoid resizing to a partial cluster size (medium 5.5)
- [CVE-2022-50019](https://insights.sbomify.com/CVE-2022-50019/): tty: serial: Fix refcount leak bug in ucc_uart.c (medium 5.5)
- [CVE-2022-50017](https://insights.sbomify.com/CVE-2022-50017/): mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start (medium 5.5)
- [CVE-2022-50016](https://insights.sbomify.com/CVE-2022-50016/): ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot (medium 5.5)
- [CVE-2022-50015](https://insights.sbomify.com/CVE-2022-50015/): ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot (medium 5.5)
- [CVE-2022-50014](https://insights.sbomify.com/CVE-2022-50014/): mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW (high 7.8)
- [CVE-2022-50013](https://insights.sbomify.com/CVE-2022-50013/): f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() (medium 5.5)
- [CVE-2022-50012](https://insights.sbomify.com/CVE-2022-50012/): powerpc/64: Init jump labels before parse_early_param() (medium 5.5)
- [CVE-2022-50011](https://insights.sbomify.com/CVE-2022-50011/): venus: pm_helpers: Fix warning in OPP during probe (medium 5.5)
- [CVE-2022-50010](https://insights.sbomify.com/CVE-2022-50010/): video: fbdev: i740fb: Check the argument of i740_calc_vclk() (medium 5.5)
- [CVE-2022-50009](https://insights.sbomify.com/CVE-2022-50009/): f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data (medium 5.5)
- [CVE-2022-50008](https://insights.sbomify.com/CVE-2022-50008/): kprobes: don't call disarm_kprobe() for disabled kprobes (medium 5.5)
- [CVE-2022-50007](https://insights.sbomify.com/CVE-2022-50007/): xfrm: fix refcount leak in __xfrm_policy_check() (medium 5.5)
- [CVE-2022-50006](https://insights.sbomify.com/CVE-2022-50006/): NFSv4.2 fix problems with __nfs42_ssc_open (medium 5.5)
- [CVE-2022-50005](https://insights.sbomify.com/CVE-2022-50005/): nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout (high 7.8)
- [CVE-2022-50004](https://insights.sbomify.com/CVE-2022-50004/): xfrm: policy: fix metadata dst->dev xmit null pointer dereference (medium 5.5)
- [CVE-2022-50003](https://insights.sbomify.com/CVE-2022-50003/): ice: xsk: prohibit usage of non-balanced queue id (medium 5.5)
- [CVE-2022-50002](https://insights.sbomify.com/CVE-2022-50002/): net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY (medium 5.5)
- [CVE-2022-50001](https://insights.sbomify.com/CVE-2022-50001/): netfilter: nft_tproxy: restrict to prerouting hook (medium 5.5)
- [CVE-2022-50000](https://insights.sbomify.com/CVE-2022-50000/): netfilter: flowtable: fix stuck flows on cleanup due to pending work (high 7.8)
- [CVE-2022-49999](https://insights.sbomify.com/CVE-2022-49999/): btrfs: fix space cache corruption and potential double allocations (high 7.8)
- [CVE-2022-49998](https://insights.sbomify.com/CVE-2022-49998/): rxrpc: Fix locking in rxrpc's sendmsg (high 7.8)
- [CVE-2022-49997](https://insights.sbomify.com/CVE-2022-49997/): net: lantiq_xrx200: restore buffer if memory allocation failed (high 7.5)
- [CVE-2022-49996](https://insights.sbomify.com/CVE-2022-49996/): btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() (medium 5.5)
- [CVE-2022-49995](https://insights.sbomify.com/CVE-2022-49995/): writeback: avoid use-after-free after removing device (high 7.8)
- [CVE-2022-49994](https://insights.sbomify.com/CVE-2022-49994/): bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem (medium 5.5)
- [CVE-2022-49993](https://insights.sbomify.com/CVE-2022-49993/): loop: Check for overflow while configuring loop (medium 5.5)
- [CVE-2022-49992](https://insights.sbomify.com/CVE-2022-49992/): mm/mprotect: only reference swap pfn page if type match (medium 5.5)
- [CVE-2022-49991](https://insights.sbomify.com/CVE-2022-49991/): mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (high 7.8)
- [CVE-2022-49990](https://insights.sbomify.com/CVE-2022-49990/): s390: fix double free of GS and RI CBs on fork() failure (high 7.8)
- [CVE-2022-49989](https://insights.sbomify.com/CVE-2022-49989/): xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (medium 5.5)
- [CVE-2022-49987](https://insights.sbomify.com/CVE-2022-49987/): md: call __md_stop_writes in md_stop (medium 5.5)
- [CVE-2022-49986](https://insights.sbomify.com/CVE-2022-49986/): scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (medium 5.5)
- [CVE-2022-49985](https://insights.sbomify.com/CVE-2022-49985/): bpf: Don't use tnum_range on array range checking for poke descriptors (high 7.8)
- [CVE-2022-49984](https://insights.sbomify.com/CVE-2022-49984/): HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (medium 5.5)
- [CVE-2022-49983](https://insights.sbomify.com/CVE-2022-49983/): udmabuf: Set the DMA mask for the udmabuf device (v2) (medium 5.5)
- [CVE-2022-49982](https://insights.sbomify.com/CVE-2022-49982/): media: pvrusb2: fix memory leak in pvr_probe (medium 5.5)
- [CVE-2022-49981](https://insights.sbomify.com/CVE-2022-49981/): HID: hidraw: fix memory leak in hidraw_release() (medium 5.5)
- [CVE-2022-49980](https://insights.sbomify.com/CVE-2022-49980/): USB: gadget: Fix use-after-free Read in usb_udc_uevent() (high 7.8)
- [CVE-2022-49979](https://insights.sbomify.com/CVE-2022-49979/): net: fix refcount bug in sk_psock_get (2) (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/178/