# Vulnerabilities published in 2022


- [CVE-2022-49978](https://insights.sbomify.com/CVE-2022-49978/): fbdev: fb_pm2fb: Avoid potential divide by zero error (medium 5.5)
- [CVE-2022-49977](https://insights.sbomify.com/CVE-2022-49977/): ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (high 7.8)
- [CVE-2022-49976](https://insights.sbomify.com/CVE-2022-49976/): platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS (medium 5.5)
- [CVE-2022-49975](https://insights.sbomify.com/CVE-2022-49975/): bpf: Don't redirect packets with invalid pkt_len (high 7.8)
- [CVE-2022-49974](https://insights.sbomify.com/CVE-2022-49974/): HID: nintendo: fix rumble worker null pointer deref (high 8.8)
- [CVE-2022-49973](https://insights.sbomify.com/CVE-2022-49973/): skmsg: Fix wrong last sg check in sk_msg_recvmsg() (medium 5.5)
- [CVE-2022-49972](https://insights.sbomify.com/CVE-2022-49972/): xsk: Fix corrupted packets for XDP_SHARED_UMEM (high 7.8)
- [CVE-2022-49971](https://insights.sbomify.com/CVE-2022-49971/): drm/amd/pm: Fix a potential gpu_metrics_table memory leak (medium 5.5)
- [CVE-2022-49970](https://insights.sbomify.com/CVE-2022-49970/): bpf, cgroup: Fix kernel BUG in purge_effective_progs (high 7.1)
- [CVE-2022-4997](https://insights.sbomify.com/CVE-2022-4997/): JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Token (high 8.6)
- [CVE-2022-49969](https://insights.sbomify.com/CVE-2022-49969/): drm/amd/display: clear optc underflow before turn off odm clock (high 7.8)
- [CVE-2022-49968](https://insights.sbomify.com/CVE-2022-49968/): ieee802154/adf7242: defer destroy_workqueue call (high 8.0)
- [CVE-2022-49967](https://insights.sbomify.com/CVE-2022-49967/): bpf: Fix a data-race around bpf_jit_limit. (medium 4.7)
- [CVE-2022-49966](https://insights.sbomify.com/CVE-2022-49966/): drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (medium 5.5)
- [CVE-2022-49965](https://insights.sbomify.com/CVE-2022-49965/): drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asics (medium 5.5)
- [CVE-2022-49964](https://insights.sbomify.com/CVE-2022-49964/): arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (medium 5.5)
- [CVE-2022-49963](https://insights.sbomify.com/CVE-2022-49963/): drm/i915/ttm: fix CCS handling (high 7.8)
- [CVE-2022-49962](https://insights.sbomify.com/CVE-2022-49962/): xhci: Fix null pointer dereference in remove if xHC has only one roothub (medium 5.5)
- [CVE-2022-49961](https://insights.sbomify.com/CVE-2022-49961/): bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO (high 7.1)
- [CVE-2022-49960](https://insights.sbomify.com/CVE-2022-49960/): drm/i915: fix null pointer dereference (medium 5.5)
- [CVE-2022-4996](https://insights.sbomify.com/CVE-2022-4996/): mruby bigint.c udiv floating point comparison with incorrect operator (medium 6.9)
- [CVE-2022-49959](https://insights.sbomify.com/CVE-2022-49959/): openvswitch: fix memory leak at failed datapath creation (medium 5.5)
- [CVE-2022-49958](https://insights.sbomify.com/CVE-2022-49958/): net/sched: fix netdevice reference leaks in attach_default_qdiscs() (medium 5.5)
- [CVE-2022-49957](https://insights.sbomify.com/CVE-2022-49957/): kcm: fix strp_init() order and cleanup (medium 5.5)
- [CVE-2022-49956](https://insights.sbomify.com/CVE-2022-49956/): staging: rtl8712: fix use after free bugs (high 7.0)
- [CVE-2022-49955](https://insights.sbomify.com/CVE-2022-49955/): powerpc/rtas: Fix RTAS MSR[HV] handling for Cell (medium 5.5)
- [CVE-2022-49954](https://insights.sbomify.com/CVE-2022-49954/): Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (medium 5.5)
- [CVE-2022-49953](https://insights.sbomify.com/CVE-2022-49953/): iio: light: cm3605: Fix an error handling path in cm3605_probe() (medium 5.5)
- [CVE-2022-49952](https://insights.sbomify.com/CVE-2022-49952/): misc: fastrpc: fix memory corruption on probe (high 7.8)
- [CVE-2022-49951](https://insights.sbomify.com/CVE-2022-49951/): firmware_loader: Fix use-after-free during unregister (high 7.8)
- [CVE-2022-49950](https://insights.sbomify.com/CVE-2022-49950/): misc: fastrpc: fix memory corruption on open (high 7.8)
- [CVE-2022-4995](https://insights.sbomify.com/CVE-2022-4995/): Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp (critical 9.3)
- [CVE-2022-49949](https://insights.sbomify.com/CVE-2022-49949/): firmware_loader: Fix memory leak in firmware upload (medium 5.5)
- [CVE-2022-49948](https://insights.sbomify.com/CVE-2022-49948/): vt: Clear selection before changing the font (high 7.8)
- [CVE-2022-49947](https://insights.sbomify.com/CVE-2022-49947/): binder: fix alloc->vma_vm_mm null-ptr dereference (medium 5.5)
- [CVE-2022-49946](https://insights.sbomify.com/CVE-2022-49946/): clk: bcm: rpi: Prevent out-of-bounds access (high 7.1)
- [CVE-2022-49945](https://insights.sbomify.com/CVE-2022-49945/): hwmon: (gpio-fan) Fix array out of bounds access (high 7.1)
- [CVE-2022-49944](https://insights.sbomify.com/CVE-2022-49944/): Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" (high 7.8)
- [CVE-2022-49943](https://insights.sbomify.com/CVE-2022-49943/): USB: gadget: Fix obscure lockdep violation for udc_mutex (medium 5.5)
- [CVE-2022-49942](https://insights.sbomify.com/CVE-2022-49942/): wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (medium 5.5)
- [CVE-2022-49940](https://insights.sbomify.com/CVE-2022-49940/): tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (medium 5.5)
- [CVE-2022-4994](https://insights.sbomify.com/CVE-2022-4994/): KVM: x86: wean fast IN from emulator_pio_in (not scored)
- [CVE-2022-49939](https://insights.sbomify.com/CVE-2022-49939/): binder: fix UAF of ref->proc caused by race condition (high 7.8)
- [CVE-2022-49938](https://insights.sbomify.com/CVE-2022-49938/): cifs: fix small mempool leak in SMB2_negotiate() (medium 5.5)
- [CVE-2022-49937](https://insights.sbomify.com/CVE-2022-49937/): media: mceusb: Use new usb_control_msg_*() routines (medium 5.5)
- [CVE-2022-49936](https://insights.sbomify.com/CVE-2022-49936/): USB: core: Prevent nested device-reset calls (medium 5.5)
- [CVE-2022-49935](https://insights.sbomify.com/CVE-2022-49935/): dma-buf/dma-resv: check if the new fence is really later (high 7.8)
- [CVE-2022-49934](https://insights.sbomify.com/CVE-2022-49934/): wifi: mac80211: Fix UAF in ieee80211_scan_rx() (high 8.8)
- [CVE-2022-49932](https://insights.sbomify.com/CVE-2022-49932/): KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace (medium 5.5)
- [CVE-2022-49931](https://insights.sbomify.com/CVE-2022-49931/): IB/hfi1: Correctly move list in sc_disable() (high 8.8)
- [CVE-2022-49930](https://insights.sbomify.com/CVE-2022-49930/): RDMA/hns: Fix NULL pointer problem in free_mr_init() (medium 5.5)
- [CVE-2022-4993](https://insights.sbomify.com/CVE-2022-4993/): HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions a (critical 9.1)
- [CVE-2022-49929](https://insights.sbomify.com/CVE-2022-49929/): RDMA/rxe: Fix mr leak in RESPST_ERR_RNR (medium 5.5)
- [CVE-2022-49928](https://insights.sbomify.com/CVE-2022-49928/): SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (high 7.5)
- [CVE-2022-49927](https://insights.sbomify.com/CVE-2022-49927/): nfs4: Fix kmemleak when allocate slot failed (medium 5.5)
- [CVE-2022-49926](https://insights.sbomify.com/CVE-2022-49926/): net: dsa: Fix possible memory leaks in dsa_loop_init() (medium 5.5)
- [CVE-2022-49925](https://insights.sbomify.com/CVE-2022-49925/): RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (medium 5.5)
- [CVE-2022-49924](https://insights.sbomify.com/CVE-2022-49924/): nfc: fdp: Fix potential memory leak in fdp_nci_send() (medium 5.5)
- [CVE-2022-49923](https://insights.sbomify.com/CVE-2022-49923/): nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (medium 5.5)
- [CVE-2022-49922](https://insights.sbomify.com/CVE-2022-49922/): nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (medium 5.5)
- [CVE-2022-49921](https://insights.sbomify.com/CVE-2022-49921/): net: sched: Fix use after free in red_enqueue() (high 7.8)
- [CVE-2022-49920](https://insights.sbomify.com/CVE-2022-49920/): netfilter: nf_tables: netlink notifier might race to release objects (high 7.8)
- [CVE-2022-4992](https://insights.sbomify.com/CVE-2022-4992/): Dräger Infinity M540 VG4.1.1 Spoofed Network Message Handling DoS/Tampering (high 8.8)
- [CVE-2022-49919](https://insights.sbomify.com/CVE-2022-49919/): netfilter: nf_tables: release flow rule object from commit path (high 7.8)
- [CVE-2022-49918](https://insights.sbomify.com/CVE-2022-49918/): ipvs: fix WARNING in __ip_vs_cleanup_batch() (medium 5.5)
- [CVE-2022-49917](https://insights.sbomify.com/CVE-2022-49917/): ipvs: fix WARNING in ip_vs_app_net_cleanup() (high 7.8)
- [CVE-2022-49916](https://insights.sbomify.com/CVE-2022-49916/): rose: Fix NULL pointer dereference in rose_send_frame() (medium 5.5)
- [CVE-2022-49915](https://insights.sbomify.com/CVE-2022-49915/): mISDN: fix possible memory leak in mISDN_register_device() (medium 5.5)
- [CVE-2022-49914](https://insights.sbomify.com/CVE-2022-49914/): btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (medium 5.5)
- [CVE-2022-49913](https://insights.sbomify.com/CVE-2022-49913/): btrfs: fix inode list leak during backref walking at find_parent_nodes() (medium 5.5)
- [CVE-2022-49912](https://insights.sbomify.com/CVE-2022-49912/): btrfs: fix ulist leaks in error paths of qgroup self tests (medium 5.5)
- [CVE-2022-49911](https://insights.sbomify.com/CVE-2022-49911/): netfilter: ipset: enforce documented limit to prevent allocating huge memory (medium 5.5)
- [CVE-2022-49910](https://insights.sbomify.com/CVE-2022-49910/): Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (high 8.8)
- [CVE-2022-4991](https://insights.sbomify.com/CVE-2022-4991/): Tychon is vulnerable to privilege escalation due to OPENSSLDIR location (high 7.4)
- [CVE-2022-49908](https://insights.sbomify.com/CVE-2022-49908/): Bluetooth: L2CAP: Fix memory leak in vhci_write (medium 5.5)
- [CVE-2022-49907](https://insights.sbomify.com/CVE-2022-49907/): net: mdio: fix undefined behavior in bit shift for __mdiobus_register (high 7.8)
- [CVE-2022-49906](https://insights.sbomify.com/CVE-2022-49906/): ibmvnic: Free rwi on reset success (medium 5.5)
- [CVE-2022-49905](https://insights.sbomify.com/CVE-2022-49905/): net/smc: Fix possible leaked pernet namespace in smc_init() (high 7.8)
- [CVE-2022-49904](https://insights.sbomify.com/CVE-2022-49904/): net, neigh: Fix null-ptr-deref in neigh_table_clear() (medium 5.5)
- [CVE-2022-49903](https://insights.sbomify.com/CVE-2022-49903/): ipv6: fix WARNING in ip6_route_net_exit_late() (medium 5.5)
- [CVE-2022-49902](https://insights.sbomify.com/CVE-2022-49902/): block: Fix possible memory leak for rq_wb on add_disk failure (medium 5.5)
- [CVE-2022-49901](https://insights.sbomify.com/CVE-2022-49901/): blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (medium 5.5)
- [CVE-2022-49900](https://insights.sbomify.com/CVE-2022-49900/): i2c: piix4: Fix adapter not be removed in piix4_remove() (high 7.8)
- [CVE-2022-4990](https://insights.sbomify.com/CVE-2022-4990/): Privilege escalation in AI Suite 3 (high 7.3)
- [CVE-2022-49899](https://insights.sbomify.com/CVE-2022-49899/): fscrypt: stop using keyrings subsystem for fscrypt_master_key (high 7.8)
- [CVE-2022-49898](https://insights.sbomify.com/CVE-2022-49898/): btrfs: fix tree mod log mishandling of reallocated nodes (high 7.8)
- [CVE-2022-49896](https://insights.sbomify.com/CVE-2022-49896/): cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak (medium 5.5)
- [CVE-2022-49895](https://insights.sbomify.com/CVE-2022-49895/): cxl/region: Fix decoder allocation crash (medium 5.5)
- [CVE-2022-49894](https://insights.sbomify.com/CVE-2022-49894/): cxl/region: Fix region HPA ordering validation (medium 5.5)
- [CVE-2022-49893](https://insights.sbomify.com/CVE-2022-49893/): cxl/region: Fix cxl_region leak, cleanup targets at region delete (medium 5.5)
- [CVE-2022-49892](https://insights.sbomify.com/CVE-2022-49892/): ftrace: Fix use-after-free for dynamic ftrace_ops (high 7.8)
- [CVE-2022-49891](https://insights.sbomify.com/CVE-2022-49891/): tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (medium 5.5)
- [CVE-2022-49890](https://insights.sbomify.com/CVE-2022-49890/): capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (medium 5.5)
- [CVE-2022-4989](https://insights.sbomify.com/CVE-2022-4989/): Privilege escalation in AI Suite 3 (high 8.5)
- [CVE-2022-49889](https://insights.sbomify.com/CVE-2022-49889/): ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (medium 5.5)
- [CVE-2022-49888](https://insights.sbomify.com/CVE-2022-49888/): arm64: entry: avoid kprobe recursion (high 7.8)
- [CVE-2022-49887](https://insights.sbomify.com/CVE-2022-49887/): media: meson: vdec: fix possible refcount leak in vdec_probe() (medium 5.5)
- [CVE-2022-49886](https://insights.sbomify.com/CVE-2022-49886/): x86/tdx: Panic on bad configs that #VE on "private" memory access (high 8.4)
- [CVE-2022-49885](https://insights.sbomify.com/CVE-2022-49885/): ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (medium 5.5)
- [CVE-2022-49884](https://insights.sbomify.com/CVE-2022-49884/): KVM: Initialize gfn_to_pfn_cache locks in dedicated helper (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/179/