# Vulnerabilities published in 2022


- [CVE-2022-49507](https://insights.sbomify.com/CVE-2022-49507/): regulator: da9121: Fix uninit-value in da9121_assign_chip_model() (medium 5.5)
- [CVE-2022-49506](https://insights.sbomify.com/CVE-2022-49506/): drm/mediatek: Add vblank register/unregister callback functions (medium 5.5)
- [CVE-2022-49505](https://insights.sbomify.com/CVE-2022-49505/): NFC: NULL out the dev->rfkill to prevent UAF (high 7.8)
- [CVE-2022-49504](https://insights.sbomify.com/CVE-2022-49504/): scsi: lpfc: Inhibit aborts if external loopback plug is inserted (medium 5.5)
- [CVE-2022-49503](https://insights.sbomify.com/CVE-2022-49503/): ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix (high 7.1)
- [CVE-2022-49502](https://insights.sbomify.com/CVE-2022-49502/): media: rga: fix possible memory leak in rga_probe (medium 5.5)
- [CVE-2022-49501](https://insights.sbomify.com/CVE-2022-49501/): usbnet: Run unregister_netdev() before unbind() again (high 7.8)
- [CVE-2022-49500](https://insights.sbomify.com/CVE-2022-49500/): wl1251: dynamically allocate memory used for DMA (high 8.8)
- [CVE-2022-4950](https://insights.sbomify.com/CVE-2022-4950/): Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation (high 8.8)
- [CVE-2022-49499](https://insights.sbomify.com/CVE-2022-49499/): drm/msm: Fix null pointer dereferences without iommu (medium 5.5)
- [CVE-2022-49498](https://insights.sbomify.com/CVE-2022-49498/): ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (medium 5.5)
- [CVE-2022-49497](https://insights.sbomify.com/CVE-2022-49497/): net: remove two BUG() from skb_checksum_help() (medium 5.5)
- [CVE-2022-49496](https://insights.sbomify.com/CVE-2022-49496/): media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko (medium 5.5)
- [CVE-2022-49495](https://insights.sbomify.com/CVE-2022-49495/): drm/msm/hdmi: check return value after calling platform_get_resource_byname() (medium 5.5)
- [CVE-2022-49494](https://insights.sbomify.com/CVE-2022-49494/): mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() (medium 5.5)
- [CVE-2022-49493](https://insights.sbomify.com/CVE-2022-49493/): ASoC: rt5645: Fix errorenous cleanup order (high 7.8)
- [CVE-2022-49492](https://insights.sbomify.com/CVE-2022-49492/): nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (medium 5.5)
- [CVE-2022-49491](https://insights.sbomify.com/CVE-2022-49491/): drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (medium 5.5)
- [CVE-2022-49490](https://insights.sbomify.com/CVE-2022-49490/): drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected (medium 5.5)
- [CVE-2022-4949](https://insights.sbomify.com/CVE-2022-4949/): AdSanity < 1.8.2 - Authenticated Arbitrary File Upload (high 8.8)
- [CVE-2022-49489](https://insights.sbomify.com/CVE-2022-49489/): drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (high 7.8)
- [CVE-2022-49488](https://insights.sbomify.com/CVE-2022-49488/): drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected (medium 5.5)
- [CVE-2022-49487](https://insights.sbomify.com/CVE-2022-49487/): mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe() (medium 5.5)
- [CVE-2022-49486](https://insights.sbomify.com/CVE-2022-49486/): ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe (medium 5.5)
- [CVE-2022-49485](https://insights.sbomify.com/CVE-2022-49485/): drm/v3d: Fix null pointer dereference of pointer perfmon (medium 5.5)
- [CVE-2022-49484](https://insights.sbomify.com/CVE-2022-49484/): mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (medium 5.5)
- [CVE-2022-49483](https://insights.sbomify.com/CVE-2022-49483/): drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit (medium 5.5)
- [CVE-2022-49482](https://insights.sbomify.com/CVE-2022-49482/): ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (medium 5.5)
- [CVE-2022-49481](https://insights.sbomify.com/CVE-2022-49481/): regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt (medium 5.5)
- [CVE-2022-49480](https://insights.sbomify.com/CVE-2022-49480/): ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe (medium 5.5)
- [CVE-2022-4948](https://insights.sbomify.com/CVE-2022-4948/): FlyingPress <= 3.9.6 - Missing Authorization (medium 4.3)
- [CVE-2022-49479](https://insights.sbomify.com/CVE-2022-49479/): mt76: fix tx status related use-after-free race on station removal (high 8.8)
- [CVE-2022-49478](https://insights.sbomify.com/CVE-2022-49478/): media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (high 7.8)
- [CVE-2022-49477](https://insights.sbomify.com/CVE-2022-49477/): ASoC: samsung: Fix refcount leak in aries_audio_probe (medium 5.5)
- [CVE-2022-49476](https://insights.sbomify.com/CVE-2022-49476/): mt76: mt7921: fix kernel crash at mt7921_pci_remove (medium 5.5)
- [CVE-2022-49475](https://insights.sbomify.com/CVE-2022-49475/): spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() (medium 5.5)
- [CVE-2022-49474](https://insights.sbomify.com/CVE-2022-49474/): Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (high 7.8)
- [CVE-2022-49473](https://insights.sbomify.com/CVE-2022-49473/): ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* (medium 5.5)
- [CVE-2022-49472](https://insights.sbomify.com/CVE-2022-49472/): net: phy: micrel: Allow probing without .driver_data (medium 5.5)
- [CVE-2022-49471](https://insights.sbomify.com/CVE-2022-49471/): rtw89: cfo: check mac_id to avoid out-of-bounds (high 8.8)
- [CVE-2022-49470](https://insights.sbomify.com/CVE-2022-49470/): Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event (high 8.8)
- [CVE-2022-49469](https://insights.sbomify.com/CVE-2022-49469/): btrfs: fix anon_dev leak in create_subvol() (medium 5.5)
- [CVE-2022-49468](https://insights.sbomify.com/CVE-2022-49468/): thermal/core: Fix memory leak in __thermal_cooling_device_register() (medium 5.5)
- [CVE-2022-49467](https://insights.sbomify.com/CVE-2022-49467/): drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (medium 5.5)
- [CVE-2022-49466](https://insights.sbomify.com/CVE-2022-49466/): regulator: scmi: Fix refcount leak in scmi_regulator_probe (medium 5.5)
- [CVE-2022-49465](https://insights.sbomify.com/CVE-2022-49465/): blk-throttle: Set BIO_THROTTLED when bio has been throttled (high 7.8)
- [CVE-2022-49464](https://insights.sbomify.com/CVE-2022-49464/): erofs: fix buffer copy overflow of ztailpacking feature (high 7.8)
- [CVE-2022-49463](https://insights.sbomify.com/CVE-2022-49463/): thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe (medium 5.5)
- [CVE-2022-49462](https://insights.sbomify.com/CVE-2022-49462/): drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (medium 5.5)
- [CVE-2022-49461](https://insights.sbomify.com/CVE-2022-49461/): amt: fix memory leak for advertisement message (medium 5.5)
- [CVE-2022-49460](https://insights.sbomify.com/CVE-2022-49460/): PM / devfreq: rk3399_dmc: Disable edev on remove() (medium 5.5)
- [CVE-2022-4946](https://insights.sbomify.com/CVE-2022-4946/): Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect (medium 5.4)
- [CVE-2022-49459](https://insights.sbomify.com/CVE-2022-49459/): thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe (medium 5.5)
- [CVE-2022-49458](https://insights.sbomify.com/CVE-2022-49458/): drm/msm: don't free the IRQ if it was not requested (medium 5.5)
- [CVE-2022-49457](https://insights.sbomify.com/CVE-2022-49457/): ARM: versatile: Add missing of_node_put in dcscb_init (medium 5.5)
- [CVE-2022-49456](https://insights.sbomify.com/CVE-2022-49456/): bonding: fix missed rcu protection (high 7.8)
- [CVE-2022-49455](https://insights.sbomify.com/CVE-2022-49455/): misc: ocxl: fix possible double free in ocxl_file_register_afu (high 7.8)
- [CVE-2022-49454](https://insights.sbomify.com/CVE-2022-49454/): PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup() (medium 5.5)
- [CVE-2022-49453](https://insights.sbomify.com/CVE-2022-49453/): soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc (medium 5.5)
- [CVE-2022-49452](https://insights.sbomify.com/CVE-2022-49452/): dpaa2-eth: retrieve the virtual address before dma_unmap (high 7.5)
- [CVE-2022-49451](https://insights.sbomify.com/CVE-2022-49451/): firmware: arm_scmi: Fix list protocols enumeration in the base protocol (high 8.4)
- [CVE-2022-49450](https://insights.sbomify.com/CVE-2022-49450/): rxrpc: Fix listen() setting the bar too high for the prealloc rings (medium 5.5)
- [CVE-2022-4945](https://insights.sbomify.com/CVE-2022-4945/): CVE-2022-4945 (medium 6.5)
- [CVE-2022-49449](https://insights.sbomify.com/CVE-2022-49449/): pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() (medium 5.5)
- [CVE-2022-49448](https://insights.sbomify.com/CVE-2022-49448/): soc: bcm: Check for NULL return of devm_kzalloc() (medium 5.5)
- [CVE-2022-49447](https://insights.sbomify.com/CVE-2022-49447/): ARM: hisi: Add missing of_node_put after of_find_compatible_node (medium 5.5)
- [CVE-2022-49446](https://insights.sbomify.com/CVE-2022-49446/): nvdimm: Fix firmware activation deadlock scenarios (medium 5.5)
- [CVE-2022-49445](https://insights.sbomify.com/CVE-2022-49445/): pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (medium 5.5)
- [CVE-2022-49444](https://insights.sbomify.com/CVE-2022-49444/): module: fix [e_shstrndx].sh_size=0 OOB access (high 7.1)
- [CVE-2022-49443](https://insights.sbomify.com/CVE-2022-49443/): list: fix a data-race around ep->rdllist (medium 4.7)
- [CVE-2022-49442](https://insights.sbomify.com/CVE-2022-49442/): drivers/base/node.c: fix compaction sysfs file leak (medium 5.5)
- [CVE-2022-49441](https://insights.sbomify.com/CVE-2022-49441/): tty: fix deadlock caused by calling printk() under tty_port->lock (medium 5.5)
- [CVE-2022-49440](https://insights.sbomify.com/CVE-2022-49440/): powerpc/rtas: Keep MSR[RI] set when calling RTAS (medium 5.5)
- [CVE-2022-4944](https://insights.sbomify.com/CVE-2022-4944/): kalcaddle KodExplorer cross-site request forgery (medium 4.3)
- [CVE-2022-49439](https://insights.sbomify.com/CVE-2022-49439/): powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup (medium 5.5)
- [CVE-2022-49438](https://insights.sbomify.com/CVE-2022-49438/): Input: sparcspkr - fix refcount leak in bbc_beep_probe (medium 5.5)
- [CVE-2022-49437](https://insights.sbomify.com/CVE-2022-49437/): powerpc/xive: Fix refcount leak in xive_spapr_init (medium 5.5)
- [CVE-2022-49436](https://insights.sbomify.com/CVE-2022-49436/): powerpc/papr_scm: Fix leaking nvdimm_events_map elements (medium 5.5)
- [CVE-2022-49435](https://insights.sbomify.com/CVE-2022-49435/): mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() (medium 5.5)
- [CVE-2022-49434](https://insights.sbomify.com/CVE-2022-49434/): PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (medium 5.5)
- [CVE-2022-49433](https://insights.sbomify.com/CVE-2022-49433/): RDMA/hfi1: Prevent use of lock before it is initialized (medium 5.5)
- [CVE-2022-49432](https://insights.sbomify.com/CVE-2022-49432/): powerpc/xics: fix refcount leak in icp_opal_init() (medium 5.5)
- [CVE-2022-49431](https://insights.sbomify.com/CVE-2022-49431/): powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (medium 5.5)
- [CVE-2022-49430](https://insights.sbomify.com/CVE-2022-49430/): Input: gpio-keys - cancel delayed work only in case of GPIO (medium 5.5)
- [CVE-2022-4943](https://insights.sbomify.com/CVE-2022-4943/): miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change (high 7.5)
- [CVE-2022-49429](https://insights.sbomify.com/CVE-2022-49429/): RDMA/hfi1: Prevent panic when SDMA is disabled (medium 5.5)
- [CVE-2022-49428](https://insights.sbomify.com/CVE-2022-49428/): f2fs: fix to do sanity check on inline_dots inode (medium 5.5)
- [CVE-2022-49427](https://insights.sbomify.com/CVE-2022-49427/): iommu/mediatek: Remove clk_disable in mtk_iommu_remove (medium 5.5)
- [CVE-2022-49426](https://insights.sbomify.com/CVE-2022-49426/): iommu/arm-smmu-v3-sva: Fix mm use-after-free (high 7.8)
- [CVE-2022-49425](https://insights.sbomify.com/CVE-2022-49425/): f2fs: fix dereference of stale list iterator after loop body (high 7.8)
- [CVE-2022-49424](https://insights.sbomify.com/CVE-2022-49424/): iommu/mediatek: Fix NULL pointer dereference when printing dev_name (medium 5.5)
- [CVE-2022-49423](https://insights.sbomify.com/CVE-2022-49423/): rtla: Avoid record NULL pointer dereference (medium 5.5)
- [CVE-2022-49422](https://insights.sbomify.com/CVE-2022-49422/): dmaengine: idxd: Fix the error handling path in idxd_cdev_register() (medium 5.5)
- [CVE-2022-49421](https://insights.sbomify.com/CVE-2022-49421/): video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup (medium 5.5)
- [CVE-2022-49420](https://insights.sbomify.com/CVE-2022-49420/): net: annotate races around sk->sk_bound_dev_if (medium 5.5)
- [CVE-2022-4942](https://insights.sbomify.com/CVE-2022-4942/): mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting (low 3.5)
- [CVE-2022-49419](https://insights.sbomify.com/CVE-2022-49419/): video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup (high 7.8)
- [CVE-2022-49418](https://insights.sbomify.com/CVE-2022-49418/): NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (critical 9.8)
- [CVE-2022-49417](https://insights.sbomify.com/CVE-2022-49417/): iwlwifi: mei: fix potential NULL-ptr deref (medium 5.5)
- [CVE-2022-49416](https://insights.sbomify.com/CVE-2022-49416/): wifi: mac80211: fix use-after-free in chanctx code (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/184/