# Vulnerabilities published in 2022


- [CVE-2022-49323](https://insights.sbomify.com/CVE-2022-49323/): iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (medium 5.5)
- [CVE-2022-49322](https://insights.sbomify.com/CVE-2022-49322/): tracing: Fix sleeping function called from invalid context on RT kernel (medium 5.5)
- [CVE-2022-49321](https://insights.sbomify.com/CVE-2022-49321/): xprtrdma: treat all calls not a bcall when bc_serv is NULL (high 7.5)
- [CVE-2022-49320](https://insights.sbomify.com/CVE-2022-49320/): dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (medium 5.5)
- [CVE-2022-4932](https://insights.sbomify.com/CVE-2022-4932/): Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure (medium 4.3)
- [CVE-2022-49319](https://insights.sbomify.com/CVE-2022-49319/): iommu/arm-smmu-v3: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2022-49318](https://insights.sbomify.com/CVE-2022-49318/): f2fs: remove WARN_ON in f2fs_is_valid_blkaddr (medium 5.5)
- [CVE-2022-49317](https://insights.sbomify.com/CVE-2022-49317/): f2fs: avoid infinite loop to flush node pages (medium 5.5)
- [CVE-2022-49316](https://insights.sbomify.com/CVE-2022-49316/): NFSv4: Don't hold the layoutget locks across multiple RPC calls (medium 5.5)
- [CVE-2022-49315](https://insights.sbomify.com/CVE-2022-49315/): drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (medium 5.5)
- [CVE-2022-49314](https://insights.sbomify.com/CVE-2022-49314/): tty: Fix a possible resource leak in icom_probe (medium 5.5)
- [CVE-2022-49313](https://insights.sbomify.com/CVE-2022-49313/): drivers: usb: host: Fix deadlock in oxu_bus_suspend() (medium 5.5)
- [CVE-2022-49312](https://insights.sbomify.com/CVE-2022-49312/): staging: rtl8712: fix a potential memory leak in r871xu_drv_init() (medium 5.5)
- [CVE-2022-49311](https://insights.sbomify.com/CVE-2022-49311/): drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle() (medium 5.5)
- [CVE-2022-49310](https://insights.sbomify.com/CVE-2022-49310/): char: xillybus: fix a refcount leak in cleanup_dev() (medium 5.5)
- [CVE-2022-4931](https://insights.sbomify.com/CVE-2022-4931/): Missing authorization in BackUpWordPress (medium 4.3)
- [CVE-2022-49309](https://insights.sbomify.com/CVE-2022-49309/): drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() (medium 5.5)
- [CVE-2022-49308](https://insights.sbomify.com/CVE-2022-49308/): extcon: Modify extcon device to be created after driver data is set (medium 5.5)
- [CVE-2022-49307](https://insights.sbomify.com/CVE-2022-49307/): tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (medium 5.5)
- [CVE-2022-49306](https://insights.sbomify.com/CVE-2022-49306/): usb: dwc3: host: Stop setting the ACPI companion (medium 5.5)
- [CVE-2022-49305](https://insights.sbomify.com/CVE-2022-49305/): drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (medium 5.5)
- [CVE-2022-49304](https://insights.sbomify.com/CVE-2022-49304/): drivers: tty: serial: Fix deadlock in sa1100_set_termios() (medium 5.5)
- [CVE-2022-49303](https://insights.sbomify.com/CVE-2022-49303/): drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle (medium 5.5)
- [CVE-2022-49302](https://insights.sbomify.com/CVE-2022-49302/): USB: host: isp116x: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2022-49301](https://insights.sbomify.com/CVE-2022-49301/): staging: rtl8712: fix uninit-value in usb_read8() and friends (medium 5.5)
- [CVE-2022-49300](https://insights.sbomify.com/CVE-2022-49300/): nbd: fix race between nbd_alloc_config() and module removal (medium 4.7)
- [CVE-2022-4930](https://insights.sbomify.com/CVE-2022-4930/): nuxsmin sysPass URL cross site scripting (low 3.5)
- [CVE-2022-49298](https://insights.sbomify.com/CVE-2022-49298/): staging: rtl8712: fix uninit-value in r871xu_drv_init() (medium 5.5)
- [CVE-2022-49297](https://insights.sbomify.com/CVE-2022-49297/): nbd: fix io hung while disconnecting device (medium 5.5)
- [CVE-2022-49296](https://insights.sbomify.com/CVE-2022-49296/): ceph: fix possible deadlock when holding Fwb to get inline_data (medium 5.5)
- [CVE-2022-49295](https://insights.sbomify.com/CVE-2022-49295/): nbd: call genl_unregister_family() first in nbd_cleanup() (high 7.0)
- [CVE-2022-49294](https://insights.sbomify.com/CVE-2022-49294/): drm/amd/display: Check if modulo is 0 before dividing. (medium 5.5)
- [CVE-2022-49293](https://insights.sbomify.com/CVE-2022-49293/): netfilter: nf_tables: initialize registers in nft_do_chain() (medium 5.5)
- [CVE-2022-49292](https://insights.sbomify.com/CVE-2022-49292/): ALSA: oss: Fix PCM OSS buffer allocation overflow (high 7.8)
- [CVE-2022-49291](https://insights.sbomify.com/CVE-2022-49291/): ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (high 7.8)
- [CVE-2022-49290](https://insights.sbomify.com/CVE-2022-49290/): mac80211: fix potential double free on mesh join (high 7.8)
- [CVE-2022-4929](https://insights.sbomify.com/CVE-2022-4929/): icplayer tts-utils.js cross site scripting (low 3.5)
- [CVE-2022-49289](https://insights.sbomify.com/CVE-2022-49289/): uaccess: fix integer overflow on access_ok() (high 7.8)
- [CVE-2022-49288](https://insights.sbomify.com/CVE-2022-49288/): ALSA: pcm: Fix races among concurrent prealloc proc writes (high 7.8)
- [CVE-2022-49287](https://insights.sbomify.com/CVE-2022-49287/): tpm: fix reference counting for struct tpm_chip (high 7.0)
- [CVE-2022-49286](https://insights.sbomify.com/CVE-2022-49286/): tpm: use try_get_ops() in tpm-space.c (medium 4.7)
- [CVE-2022-49285](https://insights.sbomify.com/CVE-2022-49285/): iio: accel: mma8452: use the correct logic to get mma8452_data (medium 5.5)
- [CVE-2022-49284](https://insights.sbomify.com/CVE-2022-49284/): coresight: syscfg: Fix memleak on registration failure in cscfg_create_device (medium 5.5)
- [CVE-2022-49283](https://insights.sbomify.com/CVE-2022-49283/): firmware: sysfb: fix platform-device leak in error path (medium 5.5)
- [CVE-2022-49282](https://insights.sbomify.com/CVE-2022-49282/): f2fs: quota: fix loop condition at f2fs_quota_sync() (medium 5.5)
- [CVE-2022-49281](https://insights.sbomify.com/CVE-2022-49281/): cifs: fix handlecache and multiuser (medium 5.5)
- [CVE-2022-49280](https://insights.sbomify.com/CVE-2022-49280/): NFSD: prevent underflow in nfssvc_decode_writeargs() (critical 9.8)
- [CVE-2022-4928](https://insights.sbomify.com/CVE-2022-4928/): icplayer presenter.js AddonText_Selection_create cross site scripting (low 3.5)
- [CVE-2022-49279](https://insights.sbomify.com/CVE-2022-49279/): NFSD: prevent integer overflow on 32 bit systems (high 8.2)
- [CVE-2022-49278](https://insights.sbomify.com/CVE-2022-49278/): remoteproc: Fix count check in rproc_coredump_write() (high 7.1)
- [CVE-2022-49277](https://insights.sbomify.com/CVE-2022-49277/): jffs2: fix memory leak in jffs2_do_mount_fs (medium 5.5)
- [CVE-2022-49276](https://insights.sbomify.com/CVE-2022-49276/): jffs2: fix memory leak in jffs2_scan_medium (medium 5.5)
- [CVE-2022-49275](https://insights.sbomify.com/CVE-2022-49275/): can: m_can: m_can_tx_handler(): fix use after free of skb (high 7.8)
- [CVE-2022-49274](https://insights.sbomify.com/CVE-2022-49274/): ocfs2: fix crash when mount with quota enabled (high 7.8)
- [CVE-2022-49273](https://insights.sbomify.com/CVE-2022-49273/): rtc: pl031: fix rtc features null pointer dereference (medium 5.5)
- [CVE-2022-49272](https://insights.sbomify.com/CVE-2022-49272/): ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (medium 5.5)
- [CVE-2022-49271](https://insights.sbomify.com/CVE-2022-49271/): cifs: prevent bad output lengths in smb2_ioctl_query_info() (medium 5.5)
- [CVE-2022-49270](https://insights.sbomify.com/CVE-2022-49270/): dm: fix use-after-free in dm_cleanup_zoned_dev() (high 7.8)
- [CVE-2022-4927](https://insights.sbomify.com/CVE-2022-4927/): ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing (medium 5.5)
- [CVE-2022-49269](https://insights.sbomify.com/CVE-2022-49269/): can: isotp: sanitize CAN ID checks in isotp_bind() (medium 5.5)
- [CVE-2022-49268](https://insights.sbomify.com/CVE-2022-49268/): ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (medium 5.5)
- [CVE-2022-49266](https://insights.sbomify.com/CVE-2022-49266/): block: fix rq-qos breakage from skipping rq_qos_done_bio() (medium 5.5)
- [CVE-2022-49265](https://insights.sbomify.com/CVE-2022-49265/): PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() (medium 5.5)
- [CVE-2022-49264](https://insights.sbomify.com/CVE-2022-49264/): exec: Force single empty string when argv is empty (high 7.8)
- [CVE-2022-49263](https://insights.sbomify.com/CVE-2022-49263/): brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path (medium 5.5)
- [CVE-2022-49262](https://insights.sbomify.com/CVE-2022-49262/): crypto: octeontx2 - remove CONFIG_DM_CRYPT check (medium 5.5)
- [CVE-2022-49261](https://insights.sbomify.com/CVE-2022-49261/): drm/i915/gem: add missing boundary check in vm_access (high 7.8)
- [CVE-2022-49260](https://insights.sbomify.com/CVE-2022-49260/): crypto: hisilicon/sec - fix the aead software fallback for engine (critical 9.8)
- [CVE-2022-4926](https://insights.sbomify.com/CVE-2022-4926/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-49259](https://insights.sbomify.com/CVE-2022-49259/): block: don't delete queue kobject before its children (medium 5.5)
- [CVE-2022-49258](https://insights.sbomify.com/CVE-2022-49258/): crypto: ccree - Fix use after free in cc_cipher_exit() (high 7.8)
- [CVE-2022-49257](https://insights.sbomify.com/CVE-2022-49257/): watch_queue: Fix NULL dereference in error cleanup (medium 5.5)
- [CVE-2022-49256](https://insights.sbomify.com/CVE-2022-49256/): watch_queue: Actually free the watch (medium 5.5)
- [CVE-2022-49255](https://insights.sbomify.com/CVE-2022-49255/): f2fs: fix missing free nid in f2fs_handle_failed_inode (medium 5.5)
- [CVE-2022-49254](https://insights.sbomify.com/CVE-2022-49254/): media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() (medium 5.5)
- [CVE-2022-49253](https://insights.sbomify.com/CVE-2022-49253/): media: usb: go7007: s2250-board: fix leak in probe() (medium 5.5)
- [CVE-2022-49252](https://insights.sbomify.com/CVE-2022-49252/): ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type (high 7.1)
- [CVE-2022-49251](https://insights.sbomify.com/CVE-2022-49251/): ASoC: codecs: va-macro: fix accessing array out of bounds for enum type (high 7.1)
- [CVE-2022-49250](https://insights.sbomify.com/CVE-2022-49250/): ASoC: codecs: rx-macro: fix accessing compander for aux (high 7.1)
- [CVE-2022-4925](https://insights.sbomify.com/CVE-2022-4925/): Other in Chrome (medium 6.5)
- [CVE-2022-49249](https://insights.sbomify.com/CVE-2022-49249/): ASoC: codecs: wc938x: fix accessing array out of bounds for enum type (high 7.1)
- [CVE-2022-49248](https://insights.sbomify.com/CVE-2022-49248/): ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (medium 5.5)
- [CVE-2022-49247](https://insights.sbomify.com/CVE-2022-49247/): media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (medium 5.5)
- [CVE-2022-49246](https://insights.sbomify.com/CVE-2022-49246/): ASoC: atmel: Fix error handling in snd_proto_probe (medium 5.5)
- [CVE-2022-49245](https://insights.sbomify.com/CVE-2022-49245/): ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume (medium 5.5)
- [CVE-2022-49244](https://insights.sbomify.com/CVE-2022-49244/): ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe (medium 5.5)
- [CVE-2022-49243](https://insights.sbomify.com/CVE-2022-49243/): ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (medium 5.5)
- [CVE-2022-49242](https://insights.sbomify.com/CVE-2022-49242/): ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (medium 5.5)
- [CVE-2022-49241](https://insights.sbomify.com/CVE-2022-49241/): ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (medium 5.5)
- [CVE-2022-49240](https://insights.sbomify.com/CVE-2022-49240/): ASoC: mediatek: mt8195: Fix error handling in mt8195_mt6359_rt1019_rt5682_dev_probe (medium 5.5)
- [CVE-2022-4924](https://insights.sbomify.com/CVE-2022-4924/): Use after free in Chrome (critical 9.6)
- [CVE-2022-49239](https://insights.sbomify.com/CVE-2022-49239/): ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data (medium 5.5)
- [CVE-2022-49238](https://insights.sbomify.com/CVE-2022-49238/): ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 (high 8.8)
- [CVE-2022-49237](https://insights.sbomify.com/CVE-2022-49237/): ath11k: add missing of_node_put() to avoid leak (medium 5.5)
- [CVE-2022-49236](https://insights.sbomify.com/CVE-2022-49236/): bpf: Fix UAF due to race between btf_try_get_module and load_module (high 7.8)
- [CVE-2022-49235](https://insights.sbomify.com/CVE-2022-49235/): ath9k_htc: fix uninit value bugs (medium 5.5)
- [CVE-2022-49234](https://insights.sbomify.com/CVE-2022-49234/): net: dsa: Avoid cross-chip syncing of VLAN filtering (high 7.8)
- [CVE-2022-49233](https://insights.sbomify.com/CVE-2022-49233/): drm/amd/display: Call dc_stream_release for remove link enc assignment (medium 5.5)
- [CVE-2022-49232](https://insights.sbomify.com/CVE-2022-49232/): drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (medium 5.5)
- [CVE-2022-49231](https://insights.sbomify.com/CVE-2022-49231/): rtw88: fix memory overrun and memory leak during hw_scan (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/186/