# Vulnerabilities published in 2022


- [CVE-2022-4979](https://insights.sbomify.com/CVE-2022-4979/): Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS (medium 5.1)
- [CVE-2022-49789](https://insights.sbomify.com/CVE-2022-49789/): scsi: zfcp: Fix double free of FSF request when qdio send fails (high 7.0)
- [CVE-2022-49788](https://insights.sbomify.com/CVE-2022-49788/): misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (medium 5.5)
- [CVE-2022-49787](https://insights.sbomify.com/CVE-2022-49787/): mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (medium 5.5)
- [CVE-2022-49786](https://insights.sbomify.com/CVE-2022-49786/): blk-cgroup: properly pin the parent in blkcg_css_online (medium 5.5)
- [CVE-2022-49785](https://insights.sbomify.com/CVE-2022-49785/): x86/sgx: Add overflow check in sgx_validate_offset_length() (medium 5.5)
- [CVE-2022-49784](https://insights.sbomify.com/CVE-2022-49784/): perf/x86/amd/uncore: Fix memory leak for events array (medium 5.5)
- [CVE-2022-49783](https://insights.sbomify.com/CVE-2022-49783/): x86/fpu: Drop fpregs lock before inheriting FPU permissions (medium 5.5)
- [CVE-2022-49782](https://insights.sbomify.com/CVE-2022-49782/): perf: Improve missing SIGTRAP checking (medium 5.5)
- [CVE-2022-49781](https://insights.sbomify.com/CVE-2022-49781/): perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling (medium 4.7)
- [CVE-2022-49780](https://insights.sbomify.com/CVE-2022-49780/): scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (medium 5.5)
- [CVE-2022-4978](https://insights.sbomify.com/CVE-2022-4978/): Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE (critical 9.3)
- [CVE-2022-49779](https://insights.sbomify.com/CVE-2022-49779/): kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (high 7.8)
- [CVE-2022-49778](https://insights.sbomify.com/CVE-2022-49778/): arm64/mm: fix incorrect file_map_count for non-leaf pmd/pud (medium 5.5)
- [CVE-2022-49777](https://insights.sbomify.com/CVE-2022-49777/): Input: i8042 - fix leaking of platform device on module removal (medium 5.5)
- [CVE-2022-49776](https://insights.sbomify.com/CVE-2022-49776/): macvlan: enforce a consistent minimal mtu (medium 5.5)
- [CVE-2022-49775](https://insights.sbomify.com/CVE-2022-49775/): tcp: cdg: allow tcp_cdg_release() to be called multiple times (high 7.8)
- [CVE-2022-49774](https://insights.sbomify.com/CVE-2022-49774/): KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign() (medium 5.5)
- [CVE-2022-49773](https://insights.sbomify.com/CVE-2022-49773/): drm/amd/display: Fix optc2_configure warning on dcn314 (medium 5.5)
- [CVE-2022-49772](https://insights.sbomify.com/CVE-2022-49772/): ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (medium 5.5)
- [CVE-2022-49771](https://insights.sbomify.com/CVE-2022-49771/): dm ioctl: fix misbehavior if list_versions races with module loading (medium 4.7)
- [CVE-2022-49770](https://insights.sbomify.com/CVE-2022-49770/): ceph: avoid putting the realm twice when decoding snaps fails (critical 9.8)
- [CVE-2022-49769](https://insights.sbomify.com/CVE-2022-49769/): gfs2: Check sb_bsize_shift after reading superblock (medium 5.5)
- [CVE-2022-49768](https://insights.sbomify.com/CVE-2022-49768/): 9p: trans_fd/p9_conn_cancel: drop client lock earlier (high 7.5)
- [CVE-2022-49767](https://insights.sbomify.com/CVE-2022-49767/): 9p/trans_fd: always use O_NONBLOCK read/write (medium 5.5)
- [CVE-2022-49766](https://insights.sbomify.com/CVE-2022-49766/): netlink: Bounds-check struct nlmsgerr creation (medium 5.5)
- [CVE-2022-49765](https://insights.sbomify.com/CVE-2022-49765/): net/9p: use a dedicated spinlock for trans_fd (medium 5.5)
- [CVE-2022-49764](https://insights.sbomify.com/CVE-2022-49764/): bpf: Prevent bpf program recursion for raw tracepoint probes (medium 5.5)
- [CVE-2022-49763](https://insights.sbomify.com/CVE-2022-49763/): ntfs: fix use-after-free in ntfs_attr_find() (high 7.8)
- [CVE-2022-49762](https://insights.sbomify.com/CVE-2022-49762/): ntfs: check overflow when iterating ATTR_RECORDs (medium 5.5)
- [CVE-2022-49761](https://insights.sbomify.com/CVE-2022-49761/): btrfs: always report error in run_one_delayed_ref() (high 7.8)
- [CVE-2022-49760](https://insights.sbomify.com/CVE-2022-49760/): mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() (high 7.8)
- [CVE-2022-4976](https://insights.sbomify.com/CVE-2022-4976/): Memory corruption in Archive::Unzip::Burst (critical 9.8)
- [CVE-2022-49759](https://insights.sbomify.com/CVE-2022-49759/): VMCI: Use threaded irqs instead of tasklets (medium 5.5)
- [CVE-2022-49758](https://insights.sbomify.com/CVE-2022-49758/): reset: uniphier-glue: Fix possible null-ptr-deref (medium 5.5)
- [CVE-2022-49757](https://insights.sbomify.com/CVE-2022-49757/): EDAC/highbank: Fix memory leak in highbank_mc_probe() (medium 5.5)
- [CVE-2022-49756](https://insights.sbomify.com/CVE-2022-49756/): phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() (medium 5.5)
- [CVE-2022-49755](https://insights.sbomify.com/CVE-2022-49755/): usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (high 7.8)
- [CVE-2022-49754](https://insights.sbomify.com/CVE-2022-49754/): Bluetooth: Fix a buffer overflow in mgmt_mesh_add() (high 7.8)
- [CVE-2022-49753](https://insights.sbomify.com/CVE-2022-49753/): dmaengine: Fix double increment of client_count in dma_chan_get() (high 7.8)
- [CVE-2022-49752](https://insights.sbomify.com/CVE-2022-49752/): device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() (medium 5.5)
- [CVE-2022-49751](https://insights.sbomify.com/CVE-2022-49751/): w1: fix WARNING after calling w1_process() (medium 5.5)
- [CVE-2022-49750](https://insights.sbomify.com/CVE-2022-49750/): cpufreq: CPPC: Add u64 casts to avoid overflowing (medium 5.5)
- [CVE-2022-4975](https://insights.sbomify.com/CVE-2022-4975/): Rhacs: cross-site scripting in portal (high 8.9)
- [CVE-2022-49749](https://insights.sbomify.com/CVE-2022-49749/): i2c: designware: use casting of u64 in clock multiplication to avoid overflow (medium 5.5)
- [CVE-2022-49748](https://insights.sbomify.com/CVE-2022-49748/): perf/x86/amd: fix potential integer overflow on shift of a int (medium 5.5)
- [CVE-2022-49747](https://insights.sbomify.com/CVE-2022-49747/): erofs/zmap.c: Fix incorrect offset calculation (medium 5.5)
- [CVE-2022-49746](https://insights.sbomify.com/CVE-2022-49746/): dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (medium 5.5)
- [CVE-2022-49745](https://insights.sbomify.com/CVE-2022-49745/): fpga: m10bmc-sec: Fix probe rollback (medium 5.5)
- [CVE-2022-49744](https://insights.sbomify.com/CVE-2022-49744/): mm/uffd: fix pte marker when fork() without fork event (medium 5.5)
- [CVE-2022-49743](https://insights.sbomify.com/CVE-2022-49743/): ovl: Use "buf" flexible array for memcpy() destination (high 7.5)
- [CVE-2022-49742](https://insights.sbomify.com/CVE-2022-49742/): f2fs: initialize locks earlier in f2fs_fill_super() (medium 5.5)
- [CVE-2022-49741](https://insights.sbomify.com/CVE-2022-49741/): fbdev: smscufx: fix error handling code in ufx_usb_probe (medium 5.5)
- [CVE-2022-49740](https://insights.sbomify.com/CVE-2022-49740/): wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (high 7.1)
- [CVE-2022-4974](https://insights.sbomify.com/CVE-2022-4974/): Freemius SDK <= 2.4.2 - Missing Authorization Checks (medium 6.3)
- [CVE-2022-49739](https://insights.sbomify.com/CVE-2022-49739/): gfs2: Always check inode size of inline inodes (high 7.1)
- [CVE-2022-49738](https://insights.sbomify.com/CVE-2022-49738/): f2fs: fix to do sanity check on i_extra_isize in is_alive() (high 7.1)
- [CVE-2022-49737](https://insights.sbomify.com/CVE-2022-49737/): Race condition in X server (high 7.7)
- [CVE-2022-49733](https://insights.sbomify.com/CVE-2022-49733/): ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (high 7.8)
- [CVE-2022-49732](https://insights.sbomify.com/CVE-2022-49732/): sock: redo the psock vs ULP protection check (medium 5.5)
- [CVE-2022-49731](https://insights.sbomify.com/CVE-2022-49731/): ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (medium 5.5)
- [CVE-2022-4973](https://insights.sbomify.com/CVE-2022-4973/): WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function (medium 4.9)
- [CVE-2022-49729](https://insights.sbomify.com/CVE-2022-49729/): nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (medium 5.5)
- [CVE-2022-49728](https://insights.sbomify.com/CVE-2022-49728/): ipv6: Fix signed integer overflow in __ip6_append_data (medium 5.5)
- [CVE-2022-49727](https://insights.sbomify.com/CVE-2022-49727/): ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg (medium 5.5)
- [CVE-2022-49726](https://insights.sbomify.com/CVE-2022-49726/): clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() (medium 5.5)
- [CVE-2022-49725](https://insights.sbomify.com/CVE-2022-49725/): i40e: Fix call trace in setup_tx_descriptors (high 7.8)
- [CVE-2022-49724](https://insights.sbomify.com/CVE-2022-49724/): tty: goldfish: Fix free_irq() on remove (high 7.8)
- [CVE-2022-49723](https://insights.sbomify.com/CVE-2022-49723/): drm/i915/reset: Fix error_state_read ptr + offset use (medium 5.5)
- [CVE-2022-49722](https://insights.sbomify.com/CVE-2022-49722/): ice: Fix memory corruption in VF driver (high 7.8)
- [CVE-2022-49721](https://insights.sbomify.com/CVE-2022-49721/): arm64: ftrace: consistently handle PLTs. (medium 5.5)
- [CVE-2022-49720](https://insights.sbomify.com/CVE-2022-49720/): block: Fix handling of offline queues in blk_mq_alloc_request_hctx() (high 7.8)
- [CVE-2022-4972](https://insights.sbomify.com/CVE-2022-4972/): Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export (high 7.5)
- [CVE-2022-49719](https://insights.sbomify.com/CVE-2022-49719/): irqchip/gic/realview: Fix refcount leak in realview_gic_of_init (medium 5.5)
- [CVE-2022-49718](https://insights.sbomify.com/CVE-2022-49718/): irqchip/apple-aic: Fix refcount leak in aic_of_ic_init (medium 5.5)
- [CVE-2022-49717](https://insights.sbomify.com/CVE-2022-49717/): irqchip/apple-aic: Fix refcount leak in build_fiq_affinity (medium 5.5)
- [CVE-2022-49716](https://insights.sbomify.com/CVE-2022-49716/): irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions (medium 5.5)
- [CVE-2022-49715](https://insights.sbomify.com/CVE-2022-49715/): irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions (medium 5.5)
- [CVE-2022-49714](https://insights.sbomify.com/CVE-2022-49714/): irqchip/realtek-rtl: Fix refcount leak in map_interrupts (medium 5.5)
- [CVE-2022-49713](https://insights.sbomify.com/CVE-2022-49713/): usb: dwc2: Fix memory leak in dwc2_hcd_init (medium 5.5)
- [CVE-2022-49712](https://insights.sbomify.com/CVE-2022-49712/): usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe (medium 5.5)
- [CVE-2022-49711](https://insights.sbomify.com/CVE-2022-49711/): bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() (high 7.8)
- [CVE-2022-49710](https://insights.sbomify.com/CVE-2022-49710/): dm mirror log: round up region bitmap size to BITS_PER_LONG (medium 5.5)
- [CVE-2022-4971](https://insights.sbomify.com/CVE-2022-4971/): Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-49709](https://insights.sbomify.com/CVE-2022-49709/): cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle (medium 5.5)
- [CVE-2022-49708](https://insights.sbomify.com/CVE-2022-49708/): ext4: fix bug_on ext4_mb_use_inode_pa (medium 5.5)
- [CVE-2022-49707](https://insights.sbomify.com/CVE-2022-49707/): ext4: add reserved GDT blocks check (medium 5.5)
- [CVE-2022-49706](https://insights.sbomify.com/CVE-2022-49706/): zonefs: fix zonefs_iomap_begin() for reads (high 7.1)
- [CVE-2022-49705](https://insights.sbomify.com/CVE-2022-49705/): 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl (medium 5.5)
- [CVE-2022-49704](https://insights.sbomify.com/CVE-2022-49704/): 9p: fix fid refcount leak in v9fs_vfs_get_link (medium 5.5)
- [CVE-2022-49703](https://insights.sbomify.com/CVE-2022-49703/): scsi: ibmvfc: Store vhost pointer during subcrq allocation (medium 5.5)
- [CVE-2022-49702](https://insights.sbomify.com/CVE-2022-49702/): btrfs: fix hang during unmount when block group reclaim task is running (medium 5.5)
- [CVE-2022-49701](https://insights.sbomify.com/CVE-2022-49701/): scsi: ibmvfc: Allocate/free queue resource only during probe/remove (high 7.8)
- [CVE-2022-49700](https://insights.sbomify.com/CVE-2022-49700/): mm/slub: add missing TID updates on slab deactivation (high 7.8)
- [CVE-2022-49699](https://insights.sbomify.com/CVE-2022-49699/): filemap: Handle sibling entries in filemap_get_read_batch() (medium 5.5)
- [CVE-2022-49698](https://insights.sbomify.com/CVE-2022-49698/): netfilter: use get_random_u32 instead of prandom (high 7.8)
- [CVE-2022-49697](https://insights.sbomify.com/CVE-2022-49697/): bpf: Fix request_sock leak in sk lookup helpers (medium 5.5)
- [CVE-2022-49696](https://insights.sbomify.com/CVE-2022-49696/): tipc: fix use-after-free Read in tipc_named_reinit (high 7.8)
- [CVE-2022-49695](https://insights.sbomify.com/CVE-2022-49695/): igb: fix a use-after-free issue in igb_clean_tx_ring (high 7.8)
- [CVE-2022-49694](https://insights.sbomify.com/CVE-2022-49694/): block: disable the elevator int del_gendisk (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/181/