# Vulnerabilities published in 2022


- [CVE-2022-49415](https://insights.sbomify.com/CVE-2022-49415/): ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe (medium 5.5)
- [CVE-2022-49414](https://insights.sbomify.com/CVE-2022-49414/): ext4: fix race condition between ext4_write and ext4_convert_inline_data (medium 4.7)
- [CVE-2022-49413](https://insights.sbomify.com/CVE-2022-49413/): bfq: Update cgroup information before merging bio (high 7.8)
- [CVE-2022-49412](https://insights.sbomify.com/CVE-2022-49412/): bfq: Avoid merging queues with different parents (high 7.8)
- [CVE-2022-49411](https://insights.sbomify.com/CVE-2022-49411/): bfq: Make sure bfqg for which we are queueing requests is online (high 7.8)
- [CVE-2022-49410](https://insights.sbomify.com/CVE-2022-49410/): tracing: Fix potential double free in create_var_ref() (high 7.8)
- [CVE-2022-4941](https://insights.sbomify.com/CVE-2022-4941/): WCFM Membership <= 2.9.10 - Cross-Site Request Forgery (medium 6.3)
- [CVE-2022-49409](https://insights.sbomify.com/CVE-2022-49409/): ext4: fix bug_on in __es_tree_search (medium 5.5)
- [CVE-2022-49408](https://insights.sbomify.com/CVE-2022-49408/): ext4: fix memory leak in parse_apply_sb_mount_options() (medium 5.5)
- [CVE-2022-49407](https://insights.sbomify.com/CVE-2022-49407/): dlm: fix plock invalid read (critical 9.8)
- [CVE-2022-49406](https://insights.sbomify.com/CVE-2022-49406/): block: Fix potential deadlock in blk_ia_range_sysfs_show() (medium 5.5)
- [CVE-2022-49405](https://insights.sbomify.com/CVE-2022-49405/): staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() (high 7.8)
- [CVE-2022-49404](https://insights.sbomify.com/CVE-2022-49404/): RDMA/hfi1: Fix potential integer multiplication overflow errors (medium 5.5)
- [CVE-2022-49403](https://insights.sbomify.com/CVE-2022-49403/): lib/string_helpers: fix not adding strarray to device's resource list (medium 5.5)
- [CVE-2022-49402](https://insights.sbomify.com/CVE-2022-49402/): ftrace: Clean up hash direct_functions on register failures (medium 5.5)
- [CVE-2022-49401](https://insights.sbomify.com/CVE-2022-49401/): mm/page_owner: use strscpy() instead of strlcpy() (high 7.1)
- [CVE-2022-49400](https://insights.sbomify.com/CVE-2022-49400/): md: Don't set mddev private to NULL in raid0 pers->free (medium 5.5)
- [CVE-2022-4940](https://insights.sbomify.com/CVE-2022-4940/): WCFM Membership <= 2.10.0 - Missing Authorization (high 7.3)
- [CVE-2022-49399](https://insights.sbomify.com/CVE-2022-49399/): tty: goldfish: Use tty_port_destroy() to destroy port (medium 5.5)
- [CVE-2022-49398](https://insights.sbomify.com/CVE-2022-49398/): usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback (medium 5.5)
- [CVE-2022-49397](https://insights.sbomify.com/CVE-2022-49397/): phy: qcom-qmp: fix struct clk leak on probe errors (medium 5.5)
- [CVE-2022-49396](https://insights.sbomify.com/CVE-2022-49396/): phy: qcom-qmp: fix reset-controller leak on probe errors (medium 5.5)
- [CVE-2022-49395](https://insights.sbomify.com/CVE-2022-49395/): um: Fix out-of-bounds read in LDT setup (high 7.1)
- [CVE-2022-49394](https://insights.sbomify.com/CVE-2022-49394/): blk-iolatency: Fix inflight count imbalances and IO hangs on offline (medium 5.5)
- [CVE-2022-49393](https://insights.sbomify.com/CVE-2022-49393/): misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl (high 7.8)
- [CVE-2022-49392](https://insights.sbomify.com/CVE-2022-49392/): serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe (medium 5.5)
- [CVE-2022-49391](https://insights.sbomify.com/CVE-2022-49391/): remoteproc: mtk_scp: Fix a potential double free (high 7.8)
- [CVE-2022-49390](https://insights.sbomify.com/CVE-2022-49390/): macsec: fix UAF bug for real_dev (high 7.8)
- [CVE-2022-4939](https://insights.sbomify.com/CVE-2022-4939/): WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation (critical 9.8)
- [CVE-2022-49389](https://insights.sbomify.com/CVE-2022-49389/): usb: usbip: fix a refcount leak in stub_probe() (medium 5.5)
- [CVE-2022-49388](https://insights.sbomify.com/CVE-2022-49388/): ubi: ubi_create_volume: Fix use-after-free when volume creation failed (high 7.8)
- [CVE-2022-49387](https://insights.sbomify.com/CVE-2022-49387/): watchdog: rzg2l_wdt: Fix 32bit overflow issue (medium 5.5)
- [CVE-2022-49386](https://insights.sbomify.com/CVE-2022-49386/): net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks (medium 5.5)
- [CVE-2022-49385](https://insights.sbomify.com/CVE-2022-49385/): driver: base: fix UAF when driver_attach failed (high 7.8)
- [CVE-2022-49384](https://insights.sbomify.com/CVE-2022-49384/): md: fix double free of io_acct_set bioset (high 7.8)
- [CVE-2022-49383](https://insights.sbomify.com/CVE-2022-49383/): watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context' (medium 5.5)
- [CVE-2022-49382](https://insights.sbomify.com/CVE-2022-49382/): soc: rockchip: Fix refcount leak in rockchip_grf_init (medium 5.5)
- [CVE-2022-49381](https://insights.sbomify.com/CVE-2022-49381/): jffs2: fix memory leak in jffs2_do_fill_super (medium 5.5)
- [CVE-2022-49380](https://insights.sbomify.com/CVE-2022-49380/): f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() (medium 5.5)
- [CVE-2022-4938](https://insights.sbomify.com/CVE-2022-4938/): WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery (medium 6.3)
- [CVE-2022-49379](https://insights.sbomify.com/CVE-2022-49379/): driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction (medium 5.5)
- [CVE-2022-49378](https://insights.sbomify.com/CVE-2022-49378/): sfc: fix considering that all channels have TX queues (medium 5.5)
- [CVE-2022-49377](https://insights.sbomify.com/CVE-2022-49377/): blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx (high 7.8)
- [CVE-2022-49376](https://insights.sbomify.com/CVE-2022-49376/): scsi: sd: Fix potential NULL pointer dereference (medium 5.5)
- [CVE-2022-49375](https://insights.sbomify.com/CVE-2022-49375/): rtc: mt6397: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2022-49374](https://insights.sbomify.com/CVE-2022-49374/): tipc: check attribute length for bearer name (medium 5.5)
- [CVE-2022-49373](https://insights.sbomify.com/CVE-2022-49373/): watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe (medium 5.5)
- [CVE-2022-49372](https://insights.sbomify.com/CVE-2022-49372/): tcp: tcp_rtx_synack() can be called from process context (medium 5.5)
- [CVE-2022-49371](https://insights.sbomify.com/CVE-2022-49371/): driver core: fix deadlock in __device_attach (medium 5.5)
- [CVE-2022-49370](https://insights.sbomify.com/CVE-2022-49370/): firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle (medium 5.5)
- [CVE-2022-4937](https://insights.sbomify.com/CVE-2022-4937/): Missing authorization in WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible (medium 6.3)
- [CVE-2022-49369](https://insights.sbomify.com/CVE-2022-49369/): amt: fix possible memory leak in amt_rcv() (medium 5.5)
- [CVE-2022-49368](https://insights.sbomify.com/CVE-2022-49368/): net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() (high 7.1)
- [CVE-2022-49367](https://insights.sbomify.com/CVE-2022-49367/): net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register (medium 5.5)
- [CVE-2022-49366](https://insights.sbomify.com/CVE-2022-49366/): ksmbd: fix reference count leak in smb_check_perm_dacl() (medium 5.5)
- [CVE-2022-49365](https://insights.sbomify.com/CVE-2022-49365/): drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() (medium 5.5)
- [CVE-2022-49364](https://insights.sbomify.com/CVE-2022-49364/): f2fs: fix to clear dirty inode in f2fs_evict_inode() (medium 5.5)
- [CVE-2022-49363](https://insights.sbomify.com/CVE-2022-49363/): f2fs: fix to do sanity check on block address in f2fs_do_zero_range() (high 7.8)
- [CVE-2022-49362](https://insights.sbomify.com/CVE-2022-49362/): NFSD: Fix potential use-after-free in nfsd_file_put() (critical 9.8)
- [CVE-2022-49361](https://insights.sbomify.com/CVE-2022-49361/): f2fs: fix to do sanity check for inline inode (medium 5.5)
- [CVE-2022-49360](https://insights.sbomify.com/CVE-2022-49360/): f2fs: fix to do sanity check on total_data_blocks (medium 5.5)
- [CVE-2022-4936](https://insights.sbomify.com/CVE-2022-4936/): WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery (medium 6.3)
- [CVE-2022-49359](https://insights.sbomify.com/CVE-2022-49359/): drm/panfrost: Job should reference MMU not file_priv (high 7.8)
- [CVE-2022-49358](https://insights.sbomify.com/CVE-2022-49358/): netfilter: nf_tables: memleak flow rule from commit path (medium 5.5)
- [CVE-2022-49357](https://insights.sbomify.com/CVE-2022-49357/): efi: Do not import certificates from UEFI Secure Boot for T2 Macs (medium 5.5)
- [CVE-2022-49356](https://insights.sbomify.com/CVE-2022-49356/): SUNRPC: Trap RDMA segment overflows (critical 9.8)
- [CVE-2022-49354](https://insights.sbomify.com/CVE-2022-49354/): ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe (medium 5.5)
- [CVE-2022-49353](https://insights.sbomify.com/CVE-2022-49353/): powerpc/papr_scm: don't requests stats with '0' sized stats buffer (medium 5.5)
- [CVE-2022-49352](https://insights.sbomify.com/CVE-2022-49352/): ext4: fix warning in ext4_handle_inode_extension (medium 5.5)
- [CVE-2022-49351](https://insights.sbomify.com/CVE-2022-49351/): net: altera: Fix refcount leak in altera_tse_mdio_create (medium 5.5)
- [CVE-2022-49350](https://insights.sbomify.com/CVE-2022-49350/): net: mdio: unexport __init-annotated mdio_bus_init() (medium 5.5)
- [CVE-2022-4935](https://insights.sbomify.com/CVE-2022-4935/): WCFM Marketplace <= 3.4.11 - Missing Authorization (high 8.8)
- [CVE-2022-49349](https://insights.sbomify.com/CVE-2022-49349/): ext4: fix use-after-free in ext4_rename_dir_prepare (high 7.8)
- [CVE-2022-49348](https://insights.sbomify.com/CVE-2022-49348/): ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state (medium 5.5)
- [CVE-2022-49347](https://insights.sbomify.com/CVE-2022-49347/): ext4: fix bug_on in ext4_writepages (medium 5.5)
- [CVE-2022-49346](https://insights.sbomify.com/CVE-2022-49346/): net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list (medium 5.5)
- [CVE-2022-49345](https://insights.sbomify.com/CVE-2022-49345/): net: xfrm: unexport __init-annotated xfrm4_protocol_init() (medium 5.5)
- [CVE-2022-49344](https://insights.sbomify.com/CVE-2022-49344/): af_unix: Fix a data-race in unix_dgram_peer_wake_me(). (medium 4.7)
- [CVE-2022-49343](https://insights.sbomify.com/CVE-2022-49343/): ext4: avoid cycles in directory h-tree (high 7.8)
- [CVE-2022-49342](https://insights.sbomify.com/CVE-2022-49342/): net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register (medium 5.5)
- [CVE-2022-49341](https://insights.sbomify.com/CVE-2022-49341/): bpf, arm64: Clear prog->jited_len along prog->jited (medium 5.5)
- [CVE-2022-49340](https://insights.sbomify.com/CVE-2022-49340/): ip_gre: test csum_start instead of transport header (high 7.1)
- [CVE-2022-4934](https://insights.sbomify.com/CVE-2022-4934/): Command injection in Sophos Web Appliance (high 7.2)
- [CVE-2022-49339](https://insights.sbomify.com/CVE-2022-49339/): net: ipv6: unexport __init-annotated seg6_hmac_init() (medium 5.5)
- [CVE-2022-49338](https://insights.sbomify.com/CVE-2022-49338/): net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules (medium 5.5)
- [CVE-2022-49337](https://insights.sbomify.com/CVE-2022-49337/): ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (high 7.8)
- [CVE-2022-49336](https://insights.sbomify.com/CVE-2022-49336/): drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem (high 7.8)
- [CVE-2022-49335](https://insights.sbomify.com/CVE-2022-49335/): drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. (medium 5.5)
- [CVE-2022-49334](https://insights.sbomify.com/CVE-2022-49334/): mm/huge_memory: Fix xarray node memory leak (medium 5.5)
- [CVE-2022-49333](https://insights.sbomify.com/CVE-2022-49333/): net/mlx5: E-Switch, pair only capable devices (medium 5.5)
- [CVE-2022-49332](https://insights.sbomify.com/CVE-2022-49332/): scsi: lpfc: Address NULL pointer dereference after starget_to_rport() (medium 5.5)
- [CVE-2022-49331](https://insights.sbomify.com/CVE-2022-49331/): nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (medium 5.5)
- [CVE-2022-49330](https://insights.sbomify.com/CVE-2022-49330/): tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (high 7.5)
- [CVE-2022-4933](https://insights.sbomify.com/CVE-2022-4933/): ATM Consulting dolibarr_module_quicksupplierprice interface.php upatePrice sql injection (medium 6.3)
- [CVE-2022-49329](https://insights.sbomify.com/CVE-2022-49329/): vduse: Fix NULL pointer dereference on sysfs access (medium 5.5)
- [CVE-2022-49328](https://insights.sbomify.com/CVE-2022-49328/): mt76: fix use-after-free by removing a non-RCU wcid pointer (high 8.8)
- [CVE-2022-49327](https://insights.sbomify.com/CVE-2022-49327/): bcache: avoid journal no-space deadlock by reserving 1 journal bucket (medium 5.5)
- [CVE-2022-49326](https://insights.sbomify.com/CVE-2022-49326/): rtl818x: Prevent using not initialized queues (medium 5.5)
- [CVE-2022-49325](https://insights.sbomify.com/CVE-2022-49325/): tcp: add accessors to read/set tp->snd_cwnd (high 7.5)
- [CVE-2022-49324](https://insights.sbomify.com/CVE-2022-49324/): mips: cpc: Fix refcount leak in mips_cpc_default_phys_base (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/185/