# Vulnerabilities published in 2022


- [CVE-2022-49883](https://insights.sbomify.com/CVE-2022-49883/): KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (high 7.1)
- [CVE-2022-49882](https://insights.sbomify.com/CVE-2022-49882/): KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache (high 7.8)
- [CVE-2022-49881](https://insights.sbomify.com/CVE-2022-49881/): wifi: cfg80211: fix memory leak in query_regdb_file() (medium 5.5)
- [CVE-2022-49880](https://insights.sbomify.com/CVE-2022-49880/): ext4: fix warning in 'ext4_da_release_space' (medium 5.5)
- [CVE-2022-4988](https://insights.sbomify.com/CVE-2022-4988/): Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries (high 7.3)
- [CVE-2022-49879](https://insights.sbomify.com/CVE-2022-49879/): ext4: fix BUG_ON() when directory entry has invalid rec_len (medium 5.5)
- [CVE-2022-49878](https://insights.sbomify.com/CVE-2022-49878/): bpf, verifier: Fix memory leak in array reallocation for stack state (medium 5.5)
- [CVE-2022-49877](https://insights.sbomify.com/CVE-2022-49877/): bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (medium 5.5)
- [CVE-2022-49876](https://insights.sbomify.com/CVE-2022-49876/): wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit() (medium 5.5)
- [CVE-2022-49875](https://insights.sbomify.com/CVE-2022-49875/): bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (medium 5.5)
- [CVE-2022-49874](https://insights.sbomify.com/CVE-2022-49874/): HID: hyperv: fix possible memory leak in mousevsc_probe() (medium 5.5)
- [CVE-2022-49873](https://insights.sbomify.com/CVE-2022-49873/): bpf: Fix wrong reg type conversion in release_reference() (medium 5.5)
- [CVE-2022-49872](https://insights.sbomify.com/CVE-2022-49872/): net: gso: fix panic on frag_list with mixed head alloc types (high 7.5)
- [CVE-2022-49871](https://insights.sbomify.com/CVE-2022-49871/): net: tun: Fix memory leaks of napi_get_frags (medium 5.5)
- [CVE-2022-49870](https://insights.sbomify.com/CVE-2022-49870/): capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (high 7.1)
- [CVE-2022-4987](https://insights.sbomify.com/CVE-2022-4987/): Hirschmann Industrial HiVision External Application Path Hijacking Leading to Arbitrary Code Execution (high 7.0)
- [CVE-2022-49869](https://insights.sbomify.com/CVE-2022-49869/): bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (medium 5.5)
- [CVE-2022-49868](https://insights.sbomify.com/CVE-2022-49868/): phy: ralink: mt7621-pci: add sentinel to quirks table (medium 5.5)
- [CVE-2022-49867](https://insights.sbomify.com/CVE-2022-49867/): net: wwan: iosm: fix memory leak in ipc_wwan_dellink (medium 5.5)
- [CVE-2022-49866](https://insights.sbomify.com/CVE-2022-49866/): net: wwan: mhi: fix memory leak in mhi_mbim_dellink (medium 5.5)
- [CVE-2022-49865](https://insights.sbomify.com/CVE-2022-49865/): ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (high 7.1)
- [CVE-2022-49864](https://insights.sbomify.com/CVE-2022-49864/): drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (medium 5.5)
- [CVE-2022-49863](https://insights.sbomify.com/CVE-2022-49863/): can: af_can: fix NULL pointer dereference in can_rx_register() (medium 5.5)
- [CVE-2022-49862](https://insights.sbomify.com/CVE-2022-49862/): tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (medium 5.5)
- [CVE-2022-49861](https://insights.sbomify.com/CVE-2022-49861/): dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (medium 5.5)
- [CVE-2022-49860](https://insights.sbomify.com/CVE-2022-49860/): dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (medium 5.5)
- [CVE-2022-4986](https://insights.sbomify.com/CVE-2022-4986/): Hirschmann EagleSDV Denial of Service via TLS (high 8.7)
- [CVE-2022-49859](https://insights.sbomify.com/CVE-2022-49859/): net: lapbether: fix issue of invalid opcode in lapbeth_open() (high 7.8)
- [CVE-2022-49858](https://insights.sbomify.com/CVE-2022-49858/): octeontx2-pf: Fix SQE threshold checking (high 7.8)
- [CVE-2022-49857](https://insights.sbomify.com/CVE-2022-49857/): net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (medium 5.5)
- [CVE-2022-49855](https://insights.sbomify.com/CVE-2022-49855/): net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (medium 5.5)
- [CVE-2022-49854](https://insights.sbomify.com/CVE-2022-49854/): mctp: Fix an error handling path in mctp_init() (medium 5.5)
- [CVE-2022-49853](https://insights.sbomify.com/CVE-2022-49853/): net: macvlan: fix memory leaks of macvlan_common_newlink (medium 5.5)
- [CVE-2022-49852](https://insights.sbomify.com/CVE-2022-49852/): riscv: process: fix kernel info leakage (high 7.1)
- [CVE-2022-49851](https://insights.sbomify.com/CVE-2022-49851/): riscv: fix reserved memory setup (high 7.1)
- [CVE-2022-49850](https://insights.sbomify.com/CVE-2022-49850/): nilfs2: fix deadlock in nilfs_count_free_blocks() (medium 5.5)
- [CVE-2022-4985](https://insights.sbomify.com/CVE-2022-4985/): Vodafone H500s WiFi Password Disclosure via activation.json (high 8.7)
- [CVE-2022-49849](https://insights.sbomify.com/CVE-2022-49849/): btrfs: fix match incorrectly in dev_args_match_device (medium 5.5)
- [CVE-2022-49848](https://insights.sbomify.com/CVE-2022-49848/): phy: qcom-qmp-combo: fix NULL-deref on runtime resume (medium 5.5)
- [CVE-2022-49847](https://insights.sbomify.com/CVE-2022-49847/): net: ethernet: ti: am65-cpsw: Fix segmentation fault at module unload (medium 5.5)
- [CVE-2022-49846](https://insights.sbomify.com/CVE-2022-49846/): udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (high 7.8)
- [CVE-2022-49845](https://insights.sbomify.com/CVE-2022-49845/): can: j1939: j1939_send_one(): fix missing CAN header initialization (medium 5.5)
- [CVE-2022-49844](https://insights.sbomify.com/CVE-2022-49844/): can: dev: fix skb drop check (high 7.1)
- [CVE-2022-49842](https://insights.sbomify.com/CVE-2022-49842/): ASoC: core: Fix use-after-free in snd_soc_exit() (high 7.8)
- [CVE-2022-49841](https://insights.sbomify.com/CVE-2022-49841/): serial: imx: Add missing .thaw_noirq hook (medium 5.5)
- [CVE-2022-49840](https://insights.sbomify.com/CVE-2022-49840/): bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (high 7.8)
- [CVE-2022-4984](https://insights.sbomify.com/CVE-2022-4984/): ZenTao Biz < 6.5, Max < 3.0, & Open Source Edition 16.5/16.5beta1 SQL Injection via user-login.html (high 8.7)
- [CVE-2022-49839](https://insights.sbomify.com/CVE-2022-49839/): scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (medium 5.5)
- [CVE-2022-49838](https://insights.sbomify.com/CVE-2022-49838/): sctp: clear out_curr if all frag chunks of current msg are pruned (medium 5.5)
- [CVE-2022-49837](https://insights.sbomify.com/CVE-2022-49837/): bpf: Fix memory leaks in __check_func_call (medium 5.5)
- [CVE-2022-49836](https://insights.sbomify.com/CVE-2022-49836/): siox: fix possible memory leak in siox_device_add() (medium 5.5)
- [CVE-2022-49835](https://insights.sbomify.com/CVE-2022-49835/): ALSA: hda: fix potential memleak in 'add_widget_node' (medium 5.5)
- [CVE-2022-49834](https://insights.sbomify.com/CVE-2022-49834/): nilfs2: fix use-after-free bug of ns_writer on remount (high 7.8)
- [CVE-2022-49833](https://insights.sbomify.com/CVE-2022-49833/): btrfs: zoned: clone zoned device info when cloning a device (medium 5.5)
- [CVE-2022-49832](https://insights.sbomify.com/CVE-2022-49832/): pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (medium 5.5)
- [CVE-2022-49831](https://insights.sbomify.com/CVE-2022-49831/): btrfs: zoned: initialize device's zone info for seeding (medium 5.5)
- [CVE-2022-49830](https://insights.sbomify.com/CVE-2022-49830/): drm/drv: Fix potential memory leak in drm_dev_init() (medium 5.5)
- [CVE-2022-4983](https://insights.sbomify.com/CVE-2022-4983/): TEC-IT TBarCode SDK 11.15 Remote File Create (medium 6.9)
- [CVE-2022-49829](https://insights.sbomify.com/CVE-2022-49829/): drm/scheduler: fix fence ref counting (medium 5.5)
- [CVE-2022-49828](https://insights.sbomify.com/CVE-2022-49828/): hugetlbfs: don't delete error page from pagecache (medium 5.5)
- [CVE-2022-49827](https://insights.sbomify.com/CVE-2022-49827/): drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (medium 5.5)
- [CVE-2022-49826](https://insights.sbomify.com/CVE-2022-49826/): ata: libata-transport: fix double ata_host_put() in ata_tport_add() (high 7.8)
- [CVE-2022-49825](https://insights.sbomify.com/CVE-2022-49825/): ata: libata-transport: fix error handling in ata_tport_add() (medium 5.5)
- [CVE-2022-49824](https://insights.sbomify.com/CVE-2022-49824/): ata: libata-transport: fix error handling in ata_tlink_add() (medium 5.5)
- [CVE-2022-49823](https://insights.sbomify.com/CVE-2022-49823/): ata: libata-transport: fix error handling in ata_tdev_add() (medium 5.5)
- [CVE-2022-49822](https://insights.sbomify.com/CVE-2022-49822/): cifs: Fix connections leak when tlink setup failed (medium 5.5)
- [CVE-2022-49821](https://insights.sbomify.com/CVE-2022-49821/): mISDN: fix possible memory leak in mISDN_dsp_element_register() (medium 5.5)
- [CVE-2022-49820](https://insights.sbomify.com/CVE-2022-49820/): mctp i2c: don't count unused / invalid keys for flow release (medium 5.5)
- [CVE-2022-4982](https://insights.sbomify.com/CVE-2022-4982/): DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI (high 8.7)
- [CVE-2022-49819](https://insights.sbomify.com/CVE-2022-49819/): octeon_ep: fix potential memory leak in octep_device_setup() (medium 5.5)
- [CVE-2022-49818](https://insights.sbomify.com/CVE-2022-49818/): mISDN: fix misuse of put_device() in mISDN_register_device() (medium 5.5)
- [CVE-2022-49817](https://insights.sbomify.com/CVE-2022-49817/): net: mhi: Fix memory leak in mhi_net_dellink() (medium 5.5)
- [CVE-2022-49815](https://insights.sbomify.com/CVE-2022-49815/): erofs: fix missing xas_retry() in fscache mode (medium 5.5)
- [CVE-2022-49814](https://insights.sbomify.com/CVE-2022-49814/): kcm: close race conditions on sk_receive_queue (high 7.8)
- [CVE-2022-49813](https://insights.sbomify.com/CVE-2022-49813/): net: ena: Fix error handling in ena_init() (medium 5.5)
- [CVE-2022-49812](https://insights.sbomify.com/CVE-2022-49812/): bridge: switchdev: Fix memory leaks when changing VLAN protocol (medium 5.5)
- [CVE-2022-49811](https://insights.sbomify.com/CVE-2022-49811/): drbd: use after free in drbd_create_device() (high 7.8)
- [CVE-2022-49810](https://insights.sbomify.com/CVE-2022-49810/): netfs: Fix missing xas_retry() calls in xarray iteration (medium 5.5)
- [CVE-2022-4981](https://insights.sbomify.com/CVE-2022-4981/): DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference (medium 4.8)
- [CVE-2022-49809](https://insights.sbomify.com/CVE-2022-49809/): net/x25: Fix skb leak in x25_lapb_receive_frame() (medium 5.5)
- [CVE-2022-49808](https://insights.sbomify.com/CVE-2022-49808/): net: dsa: don't leak tagger-owned storage on switch driver unbind (medium 5.5)
- [CVE-2022-49807](https://insights.sbomify.com/CVE-2022-49807/): nvmet: fix a memory leak in nvmet_auth_set_key (medium 5.5)
- [CVE-2022-49806](https://insights.sbomify.com/CVE-2022-49806/): net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (medium 5.5)
- [CVE-2022-49805](https://insights.sbomify.com/CVE-2022-49805/): net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init() (medium 5.5)
- [CVE-2022-49804](https://insights.sbomify.com/CVE-2022-49804/): s390: avoid using global register for current_stack_pointer (high 7.8)
- [CVE-2022-49803](https://insights.sbomify.com/CVE-2022-49803/): netdevsim: Fix memory leak of nsim_dev->fa_cookie (medium 5.5)
- [CVE-2022-49802](https://insights.sbomify.com/CVE-2022-49802/): ftrace: Fix null pointer dereference in ftrace_add_mod() (medium 5.5)
- [CVE-2022-49801](https://insights.sbomify.com/CVE-2022-49801/): tracing: Fix memory leak in tracing_read_pipe() (medium 5.5)
- [CVE-2022-49800](https://insights.sbomify.com/CVE-2022-49800/): tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (medium 5.5)
- [CVE-2022-4980](https://insights.sbomify.com/CVE-2022-4980/): Auth bypass in Crypto Application Server (CAS) (critical 9.3)
- [CVE-2022-49799](https://insights.sbomify.com/CVE-2022-49799/): tracing: Fix wild-memory-access in register_synth_event() (high 7.1)
- [CVE-2022-49798](https://insights.sbomify.com/CVE-2022-49798/): tracing: Fix race where eprobes can be called before the event (medium 4.7)
- [CVE-2022-49797](https://insights.sbomify.com/CVE-2022-49797/): tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (medium 5.5)
- [CVE-2022-49796](https://insights.sbomify.com/CVE-2022-49796/): tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (medium 5.5)
- [CVE-2022-49795](https://insights.sbomify.com/CVE-2022-49795/): rethook: fix a potential memleak in rethook_alloc() (medium 5.5)
- [CVE-2022-49794](https://insights.sbomify.com/CVE-2022-49794/): iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (medium 5.5)
- [CVE-2022-49793](https://insights.sbomify.com/CVE-2022-49793/): iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (medium 5.5)
- [CVE-2022-49792](https://insights.sbomify.com/CVE-2022-49792/): iio: adc: mp2629: fix potential array out of bound access (high 7.3)
- [CVE-2022-49791](https://insights.sbomify.com/CVE-2022-49791/): io_uring: fix multishot accept request leaks (medium 5.5)
- [CVE-2022-49790](https://insights.sbomify.com/CVE-2022-49790/): Input: iforce - invert valid length check when fetching device IDs (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/180/