# Vulnerabilities published in 2022


- [CVE-2022-49599](https://insights.sbomify.com/CVE-2022-49599/): tcp: Fix data-races around sysctl_tcp_l3mdev_accept. (medium 4.7)
- [CVE-2022-49598](https://insights.sbomify.com/CVE-2022-49598/): tcp: Fix data-races around sysctl_tcp_mtu_probing. (medium 4.7)
- [CVE-2022-49597](https://insights.sbomify.com/CVE-2022-49597/): tcp: Fix data-races around sysctl_tcp_base_mss. (medium 4.7)
- [CVE-2022-49596](https://insights.sbomify.com/CVE-2022-49596/): tcp: Fix data-races around sysctl_tcp_min_snd_mss. (medium 4.7)
- [CVE-2022-49595](https://insights.sbomify.com/CVE-2022-49595/): tcp: Fix a data-race around sysctl_tcp_probe_threshold. (medium 4.7)
- [CVE-2022-49594](https://insights.sbomify.com/CVE-2022-49594/): tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. (medium 4.7)
- [CVE-2022-49593](https://insights.sbomify.com/CVE-2022-49593/): tcp: Fix a data-race around sysctl_tcp_probe_interval. (medium 4.7)
- [CVE-2022-49592](https://insights.sbomify.com/CVE-2022-49592/): net: stmmac: fix dma queue left shift overflow issue (high 7.8)
- [CVE-2022-49591](https://insights.sbomify.com/CVE-2022-49591/): net: dsa: microchip: ksz_common: Fix refcount leak bug (medium 5.5)
- [CVE-2022-49590](https://insights.sbomify.com/CVE-2022-49590/): igmp: Fix data-races around sysctl_igmp_llm_reports. (medium 4.7)
- [CVE-2022-4959](https://insights.sbomify.com/CVE-2022-4959/): qkmc-rk redbbs Nickname cross site scripting (low 3.5)
- [CVE-2022-49589](https://insights.sbomify.com/CVE-2022-49589/): igmp: Fix data-races around sysctl_igmp_qrv. (medium 4.7)
- [CVE-2022-49588](https://insights.sbomify.com/CVE-2022-49588/): tcp: Fix data-races around sysctl_tcp_migrate_req. (medium 4.7)
- [CVE-2022-49587](https://insights.sbomify.com/CVE-2022-49587/): tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (medium 4.7)
- [CVE-2022-49586](https://insights.sbomify.com/CVE-2022-49586/): tcp: Fix data-races around sysctl_tcp_fastopen. (medium 4.7)
- [CVE-2022-49585](https://insights.sbomify.com/CVE-2022-49585/): tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (medium 4.7)
- [CVE-2022-49584](https://insights.sbomify.com/CVE-2022-49584/): ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (medium 5.5)
- [CVE-2022-49583](https://insights.sbomify.com/CVE-2022-49583/): iavf: Fix handling of dummy receive descriptors (medium 5.5)
- [CVE-2022-49582](https://insights.sbomify.com/CVE-2022-49582/): net: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filtering (medium 5.5)
- [CVE-2022-49581](https://insights.sbomify.com/CVE-2022-49581/): be2net: Fix buffer overflow in be_get_module_eeprom (high 7.8)
- [CVE-2022-49580](https://insights.sbomify.com/CVE-2022-49580/): ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. (medium 4.7)
- [CVE-2022-4958](https://insights.sbomify.com/CVE-2022-4958/): qkmc-rk redbbs Post cross site scripting (low 3.5)
- [CVE-2022-49579](https://insights.sbomify.com/CVE-2022-49579/): ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. (medium 4.7)
- [CVE-2022-49578](https://insights.sbomify.com/CVE-2022-49578/): ip: Fix data-races around sysctl_ip_prot_sock. (medium 4.7)
- [CVE-2022-49577](https://insights.sbomify.com/CVE-2022-49577/): udp: Fix a data-race around sysctl_udp_l3mdev_accept. (medium 4.7)
- [CVE-2022-49576](https://insights.sbomify.com/CVE-2022-49576/): ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. (medium 4.7)
- [CVE-2022-49575](https://insights.sbomify.com/CVE-2022-49575/): tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. (medium 4.7)
- [CVE-2022-49574](https://insights.sbomify.com/CVE-2022-49574/): tcp: Fix data-races around sysctl_tcp_recovery. (medium 4.7)
- [CVE-2022-49573](https://insights.sbomify.com/CVE-2022-49573/): tcp: Fix a data-race around sysctl_tcp_early_retrans. (medium 4.7)
- [CVE-2022-49572](https://insights.sbomify.com/CVE-2022-49572/): tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. (medium 4.7)
- [CVE-2022-49571](https://insights.sbomify.com/CVE-2022-49571/): tcp: Fix data-races around sysctl_tcp_max_reordering. (medium 4.7)
- [CVE-2022-49570](https://insights.sbomify.com/CVE-2022-49570/): gpio: gpio-xilinx: Fix integer overflow (medium 5.5)
- [CVE-2022-4957](https://insights.sbomify.com/CVE-2022-4957/): librespeed speedtest stats.php cross site scripting (low 3.5)
- [CVE-2022-49569](https://insights.sbomify.com/CVE-2022-49569/): spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (medium 5.5)
- [CVE-2022-49568](https://insights.sbomify.com/CVE-2022-49568/): KVM: Don't null dereference ops->destroy (medium 5.5)
- [CVE-2022-49567](https://insights.sbomify.com/CVE-2022-49567/): mm/mempolicy: fix uninit-value in mpol_rebind_policy() (medium 5.5)
- [CVE-2022-49566](https://insights.sbomify.com/CVE-2022-49566/): crypto: qat - fix memory leak in RSA (medium 5.5)
- [CVE-2022-49565](https://insights.sbomify.com/CVE-2022-49565/): perf/x86/intel/lbr: Fix unchecked MSR access error on HSW (medium 5.5)
- [CVE-2022-49564](https://insights.sbomify.com/CVE-2022-49564/): crypto: qat - add param check for DH (high 7.8)
- [CVE-2022-49563](https://insights.sbomify.com/CVE-2022-49563/): crypto: qat - add param check for RSA (high 7.8)
- [CVE-2022-49562](https://insights.sbomify.com/CVE-2022-49562/): KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (high 7.8)
- [CVE-2022-49561](https://insights.sbomify.com/CVE-2022-49561/): netfilter: conntrack: re-fetch conntrack after insertion (critical 9.8)
- [CVE-2022-49560](https://insights.sbomify.com/CVE-2022-49560/): exfat: check if cluster num is valid (high 7.8)
- [CVE-2022-4956](https://insights.sbomify.com/CVE-2022-4956/): Caphyon Advanced Installer WinSxS DLL uncontrolled search path (high 7.8)
- [CVE-2022-49559](https://insights.sbomify.com/CVE-2022-49559/): KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 (medium 5.5)
- [CVE-2022-49558](https://insights.sbomify.com/CVE-2022-49558/): netfilter: nf_tables: double hook unregistration in netns path (medium 5.5)
- [CVE-2022-49557](https://insights.sbomify.com/CVE-2022-49557/): x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (high 7.8)
- [CVE-2022-49556](https://insights.sbomify.com/CVE-2022-49556/): KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak (high 7.1)
- [CVE-2022-49555](https://insights.sbomify.com/CVE-2022-49555/): Bluetooth: hci_qca: Use del_timer_sync() before freeing (high 7.8)
- [CVE-2022-49554](https://insights.sbomify.com/CVE-2022-49554/): zsmalloc: fix races between asynchronous zspage free and page migration (high 7.8)
- [CVE-2022-49553](https://insights.sbomify.com/CVE-2022-49553/): fs/ntfs3: validate BOOT sectors_per_clusters (high 7.8)
- [CVE-2022-49552](https://insights.sbomify.com/CVE-2022-49552/): bpf: Fix combination of jit blinding and pointers to bpf subprogs. (medium 5.5)
- [CVE-2022-49551](https://insights.sbomify.com/CVE-2022-49551/): usb: isp1760: Fix out-of-bounds array access (high 7.1)
- [CVE-2022-49550](https://insights.sbomify.com/CVE-2022-49550/): fs/ntfs3: provide block_invalidate_folio to fix memory leak (medium 5.5)
- [CVE-2022-4955](https://insights.sbomify.com/CVE-2022-4955/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-49549](https://insights.sbomify.com/CVE-2022-49549/): x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (medium 5.5)
- [CVE-2022-49548](https://insights.sbomify.com/CVE-2022-49548/): bpf: Fix potential array overflow in bpf_trampoline_get_progs() (high 7.8)
- [CVE-2022-49547](https://insights.sbomify.com/CVE-2022-49547/): btrfs: fix deadlock between concurrent dio writes when low on free data space (medium 5.5)
- [CVE-2022-49546](https://insights.sbomify.com/CVE-2022-49546/): x86/kexec: fix memory leak of elf header buffer (medium 5.5)
- [CVE-2022-49545](https://insights.sbomify.com/CVE-2022-49545/): ALSA: usb-audio: Cancel pending work at closing a MIDI substream (high 7.8)
- [CVE-2022-49544](https://insights.sbomify.com/CVE-2022-49544/): ipw2x00: Fix potential NULL dereference in libipw_xmit() (medium 5.5)
- [CVE-2022-49543](https://insights.sbomify.com/CVE-2022-49543/): ath11k: fix the warning of dev_wake in mhi_pm_disable_transition() (medium 5.5)
- [CVE-2022-49542](https://insights.sbomify.com/CVE-2022-49542/): scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (medium 5.5)
- [CVE-2022-49541](https://insights.sbomify.com/CVE-2022-49541/): cifs: fix potential double free during failed mount (high 7.8)
- [CVE-2022-49540](https://insights.sbomify.com/CVE-2022-49540/): rcu-tasks: Fix race in schedule and flush work (medium 4.7)
- [CVE-2022-4954](https://insights.sbomify.com/CVE-2022-4954/): Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting (medium 5.5)
- [CVE-2022-49539](https://insights.sbomify.com/CVE-2022-49539/): rtw89: ser: fix CAM leaks occurring in L2 reset (medium 5.5)
- [CVE-2022-49538](https://insights.sbomify.com/CVE-2022-49538/): ALSA: jack: Access input_dev under mutex (medium 5.5)
- [CVE-2022-49537](https://insights.sbomify.com/CVE-2022-49537/): scsi: lpfc: Fix call trace observed during I/O with CMF enabled (medium 5.5)
- [CVE-2022-49536](https://insights.sbomify.com/CVE-2022-49536/): scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (medium 5.5)
- [CVE-2022-49535](https://insights.sbomify.com/CVE-2022-49535/): scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (high 8.8)
- [CVE-2022-49534](https://insights.sbomify.com/CVE-2022-49534/): scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (medium 5.5)
- [CVE-2022-49533](https://insights.sbomify.com/CVE-2022-49533/): ath11k: Change max no of active probe SSID and BSSID to fw capability (high 7.8)
- [CVE-2022-49532](https://insights.sbomify.com/CVE-2022-49532/): drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (medium 5.5)
- [CVE-2022-49531](https://insights.sbomify.com/CVE-2022-49531/): loop: implement ->free_disk (high 7.8)
- [CVE-2022-49530](https://insights.sbomify.com/CVE-2022-49530/): drm/amd/pm: fix double free in si_parse_power_table() (high 7.8)
- [CVE-2022-4953](https://insights.sbomify.com/CVE-2022-4953/): Elementor < 3.5.5 - Iframe Injection (medium 6.1)
- [CVE-2022-49529](https://insights.sbomify.com/CVE-2022-49529/): drm/amdgpu/pm: fix the null pointer while the smu is disabled (medium 5.5)
- [CVE-2022-49528](https://insights.sbomify.com/CVE-2022-49528/): media: i2c: dw9714: Disable the regulator when the driver fails to probe (medium 5.5)
- [CVE-2022-49527](https://insights.sbomify.com/CVE-2022-49527/): media: venus: hfi: avoid null dereference in deinit (medium 5.5)
- [CVE-2022-49526](https://insights.sbomify.com/CVE-2022-49526/): md/bitmap: don't set sb values if can't pass sanity check (medium 5.5)
- [CVE-2022-49525](https://insights.sbomify.com/CVE-2022-49525/): media: cx25821: Fix the warning when removing the module (medium 5.5)
- [CVE-2022-49524](https://insights.sbomify.com/CVE-2022-49524/): media: pci: cx23885: Fix the error handling in cx23885_initdev() (high 7.8)
- [CVE-2022-49523](https://insights.sbomify.com/CVE-2022-49523/): ath11k: disable spectral scan during spectral deinit (medium 5.5)
- [CVE-2022-49522](https://insights.sbomify.com/CVE-2022-49522/): mmc: jz4740: Apply DMA engine limits to maximum segment size (medium 5.5)
- [CVE-2022-49521](https://insights.sbomify.com/CVE-2022-49521/): scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() (medium 5.5)
- [CVE-2022-49520](https://insights.sbomify.com/CVE-2022-49520/): arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall (medium 5.5)
- [CVE-2022-4952](https://insights.sbomify.com/CVE-2022-4952/): Denial of service in csharp-language-server-protocol (low 3.5)
- [CVE-2022-49519](https://insights.sbomify.com/CVE-2022-49519/): ath10k: skip ath10k_halt during suspend for driver state RESTARTING (high 8.8)
- [CVE-2022-49518](https://insights.sbomify.com/CVE-2022-49518/): ASoC: SOF: ipc3-topology: Correct get_control_data for non bytes payload (high 7.1)
- [CVE-2022-49517](https://insights.sbomify.com/CVE-2022-49517/): ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe (medium 5.5)
- [CVE-2022-49516](https://insights.sbomify.com/CVE-2022-49516/): ice: always check VF VSI pointer values (medium 5.5)
- [CVE-2022-49515](https://insights.sbomify.com/CVE-2022-49515/): ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t (high 7.1)
- [CVE-2022-49514](https://insights.sbomify.com/CVE-2022-49514/): ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe (medium 5.5)
- [CVE-2022-49513](https://insights.sbomify.com/CVE-2022-49513/): cpufreq: governor: Use kobject release() method to free dbs_data (medium 5.5)
- [CVE-2022-49512](https://insights.sbomify.com/CVE-2022-49512/): mtd: rawnand: denali: Use managed device resources (medium 5.5)
- [CVE-2022-49511](https://insights.sbomify.com/CVE-2022-49511/): fbdev: defio: fix the pagelist corruption (high 7.8)
- [CVE-2022-49510](https://insights.sbomify.com/CVE-2022-49510/): drm/omap: fix NULL but dereferenced coccicheck error (medium 5.5)
- [CVE-2022-49509](https://insights.sbomify.com/CVE-2022-49509/): media: i2c: max9286: fix kernel oops when removing module (high 7.1)
- [CVE-2022-49508](https://insights.sbomify.com/CVE-2022-49508/): HID: elan: Fix potential double free in elan_input_configured (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/183/