# Vulnerabilities published in 2022


- [CVE-2022-49230](https://insights.sbomify.com/CVE-2022-49230/): mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (medium 5.5)
- [CVE-2022-4923](https://insights.sbomify.com/CVE-2022-4923/): Security feature bypass in Chrome (low 3.1)
- [CVE-2022-49229](https://insights.sbomify.com/CVE-2022-49229/): ptp: unregister virtual clocks when unregistering physical clock. (medium 5.5)
- [CVE-2022-49228](https://insights.sbomify.com/CVE-2022-49228/): bpf: Fix a btf decl_tag bug when tagging a function (medium 5.5)
- [CVE-2022-49227](https://insights.sbomify.com/CVE-2022-49227/): igc: avoid kernel warning when changing RX ring parameters (medium 5.5)
- [CVE-2022-49226](https://insights.sbomify.com/CVE-2022-49226/): net: asix: add proper error handling of usb read errors (medium 5.5)
- [CVE-2022-49225](https://insights.sbomify.com/CVE-2022-49225/): mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (medium 5.5)
- [CVE-2022-49224](https://insights.sbomify.com/CVE-2022-49224/): power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (medium 5.5)
- [CVE-2022-49223](https://insights.sbomify.com/CVE-2022-49223/): cxl/port: Hold port reference until decoder release (high 7.8)
- [CVE-2022-49222](https://insights.sbomify.com/CVE-2022-49222/): drm/bridge: anx7625: Fix overflow issue on reading EDID (medium 5.5)
- [CVE-2022-49221](https://insights.sbomify.com/CVE-2022-49221/): drm/msm/dp: populate connector of struct dp_panel (medium 5.5)
- [CVE-2022-49220](https://insights.sbomify.com/CVE-2022-49220/): dax: make sure inodes are flushed before destroy cache (medium 5.5)
- [CVE-2022-4922](https://insights.sbomify.com/CVE-2022-4922/): Other in Chrome (medium 6.5)
- [CVE-2022-49219](https://insights.sbomify.com/CVE-2022-49219/): vfio/pci: fix memory leak during D3hot to D0 transition (medium 5.5)
- [CVE-2022-49218](https://insights.sbomify.com/CVE-2022-49218/): drm/dp: Fix OOB read when handling Post Cursor2 register (high 7.1)
- [CVE-2022-49217](https://insights.sbomify.com/CVE-2022-49217/): scsi: pm8001: Fix abort all task initialization (medium 5.5)
- [CVE-2022-49216](https://insights.sbomify.com/CVE-2022-49216/): drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (medium 5.5)
- [CVE-2022-49215](https://insights.sbomify.com/CVE-2022-49215/): xsk: Fix race at socket teardown (high 7.8)
- [CVE-2022-49214](https://insights.sbomify.com/CVE-2022-49214/): powerpc/64s: Don't use DSISR for SLB faults (medium 5.5)
- [CVE-2022-49213](https://insights.sbomify.com/CVE-2022-49213/): ath10k: Fix error handling in ath10k_setup_msa_resources (medium 5.5)
- [CVE-2022-49212](https://insights.sbomify.com/CVE-2022-49212/): mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (medium 5.5)
- [CVE-2022-49211](https://insights.sbomify.com/CVE-2022-49211/): mips: cdmm: Fix refcount leak in mips_cdmm_phys_base (medium 5.5)
- [CVE-2022-49210](https://insights.sbomify.com/CVE-2022-49210/): MIPS: pgalloc: fix memory leak caused by pgd_free() (medium 5.5)
- [CVE-2022-4921](https://insights.sbomify.com/CVE-2022-4921/): Use after free in Chrome (high 8.8)
- [CVE-2022-49209](https://insights.sbomify.com/CVE-2022-49209/): bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full (medium 5.5)
- [CVE-2022-49208](https://insights.sbomify.com/CVE-2022-49208/): RDMA/irdma: Prevent some integer underflows (medium 5.5)
- [CVE-2022-49207](https://insights.sbomify.com/CVE-2022-49207/): bpf, sockmap: Fix memleak in sk_psock_queue_msg (medium 5.5)
- [CVE-2022-49206](https://insights.sbomify.com/CVE-2022-49206/): RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (medium 5.5)
- [CVE-2022-49205](https://insights.sbomify.com/CVE-2022-49205/): bpf, sockmap: Fix double uncharge the mem of sk_msg (high 7.8)
- [CVE-2022-49204](https://insights.sbomify.com/CVE-2022-49204/): bpf, sockmap: Fix more uncharged while msg has more_data (medium 5.5)
- [CVE-2022-49203](https://insights.sbomify.com/CVE-2022-49203/): drm/amd/display: Fix double free during GPU reset on DC streams (high 7.8)
- [CVE-2022-49202](https://insights.sbomify.com/CVE-2022-49202/): Bluetooth: hci_uart: add missing NULL check in h5_enqueue (medium 5.5)
- [CVE-2022-49201](https://insights.sbomify.com/CVE-2022-49201/): ibmvnic: fix race between xmit and reset (critical 9.8)
- [CVE-2022-49200](https://insights.sbomify.com/CVE-2022-49200/): Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt (medium 5.5)
- [CVE-2022-4920](https://insights.sbomify.com/CVE-2022-4920/): Memory corruption in Chrome (critical 9.6)
- [CVE-2022-49199](https://insights.sbomify.com/CVE-2022-49199/): RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (medium 5.5)
- [CVE-2022-49198](https://insights.sbomify.com/CVE-2022-49198/): mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb (medium 5.5)
- [CVE-2022-49197](https://insights.sbomify.com/CVE-2022-49197/): af_netlink: Fix shift out of bounds in group mask calculation (medium 5.5)
- [CVE-2022-49196](https://insights.sbomify.com/CVE-2022-49196/): powerpc/pseries: Fix use after free in remove_phb_dynamic() (high 7.8)
- [CVE-2022-49195](https://insights.sbomify.com/CVE-2022-49195/): net: dsa: fix panic on shutdown if multi-chip tree failed to probe (medium 5.5)
- [CVE-2022-49194](https://insights.sbomify.com/CVE-2022-49194/): net: bcmgenet: Use stronger register read/writes to assure ordering (critical 9.8)
- [CVE-2022-49193](https://insights.sbomify.com/CVE-2022-49193/): ice: fix 'scheduling while atomic' on aux critical err interrupt (medium 5.5)
- [CVE-2022-49192](https://insights.sbomify.com/CVE-2022-49192/): drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (medium 5.5)
- [CVE-2022-49191](https://insights.sbomify.com/CVE-2022-49191/): mxser: fix xmit_buf leak in activate when LSR == 0xff (medium 5.5)
- [CVE-2022-49190](https://insights.sbomify.com/CVE-2022-49190/): kernel/resource: fix kfree() of bootmem memory again (medium 5.5)
- [CVE-2022-4919](https://insights.sbomify.com/CVE-2022-4919/): Use after free in Chrome (high 8.8)
- [CVE-2022-49189](https://insights.sbomify.com/CVE-2022-49189/): clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (medium 5.5)
- [CVE-2022-49188](https://insights.sbomify.com/CVE-2022-49188/): remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (medium 5.5)
- [CVE-2022-49187](https://insights.sbomify.com/CVE-2022-49187/): clk: Fix clk_hw_get_clk() when dev is NULL (medium 5.5)
- [CVE-2022-49186](https://insights.sbomify.com/CVE-2022-49186/): clk: visconti: prevent array overflow in visconti_clk_register_gates() (high 7.8)
- [CVE-2022-49185](https://insights.sbomify.com/CVE-2022-49185/): pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (medium 5.5)
- [CVE-2022-49184](https://insights.sbomify.com/CVE-2022-49184/): net: sparx5: switchdev: fix possible NULL pointer dereference (medium 5.5)
- [CVE-2022-49183](https://insights.sbomify.com/CVE-2022-49183/): net/sched: act_ct: fix ref leak when switching zones (medium 5.5)
- [CVE-2022-49182](https://insights.sbomify.com/CVE-2022-49182/): net: hns3: add vlan list lock to protect vlan list (high 7.8)
- [CVE-2022-49180](https://insights.sbomify.com/CVE-2022-49180/): LSM: general protection fault in legacy_parse_param (medium 5.5)
- [CVE-2022-4918](https://insights.sbomify.com/CVE-2022-4918/): Use after free in Chrome (high 8.8)
- [CVE-2022-49179](https://insights.sbomify.com/CVE-2022-49179/): block, bfq: don't move oom_bfqq (high 7.8)
- [CVE-2022-49178](https://insights.sbomify.com/CVE-2022-49178/): memstick/mspro_block: fix handling of read-only devices (high 7.8)
- [CVE-2022-49177](https://insights.sbomify.com/CVE-2022-49177/): hwrng: cavium - fix NULL but dereferenced coccicheck error (medium 5.5)
- [CVE-2022-49176](https://insights.sbomify.com/CVE-2022-49176/): bfq: fix use-after-free in bfq_dispatch_request (high 7.8)
- [CVE-2022-49175](https://insights.sbomify.com/CVE-2022-49175/): PM: core: keep irq flags in device_pm_check_callbacks() (medium 5.5)
- [CVE-2022-49174](https://insights.sbomify.com/CVE-2022-49174/): ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (high 7.8)
- [CVE-2022-49173](https://insights.sbomify.com/CVE-2022-49173/): spi: fsi: Implement a timeout for polling status (medium 5.5)
- [CVE-2022-49172](https://insights.sbomify.com/CVE-2022-49172/): parisc: Fix non-access data TLB cache flush faults (high 7.8)
- [CVE-2022-49171](https://insights.sbomify.com/CVE-2022-49171/): ext4: don't BUG if someone dirty pages without asking ext4 first (medium 5.5)
- [CVE-2022-49170](https://insights.sbomify.com/CVE-2022-49170/): f2fs: fix to do sanity check on curseg->alloc_type (high 7.8)
- [CVE-2022-4917](https://insights.sbomify.com/CVE-2022-4917/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-49169](https://insights.sbomify.com/CVE-2022-49169/): f2fs: use spin_lock to avoid hang (medium 5.5)
- [CVE-2022-49168](https://insights.sbomify.com/CVE-2022-49168/): btrfs: do not clean up repair bio if submit fails (high 7.8)
- [CVE-2022-49167](https://insights.sbomify.com/CVE-2022-49167/): btrfs: do not double complete bio on errors during compressed reads (high 7.8)
- [CVE-2022-49166](https://insights.sbomify.com/CVE-2022-49166/): ntfs: add sanity check on allocation size (medium 5.5)
- [CVE-2022-49165](https://insights.sbomify.com/CVE-2022-49165/): media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (medium 5.5)
- [CVE-2022-49164](https://insights.sbomify.com/CVE-2022-49164/): powerpc/tm: Fix more userspace r13 corruption (medium 5.5)
- [CVE-2022-49163](https://insights.sbomify.com/CVE-2022-49163/): media: imx-jpeg: fix a bug of accessing array out of bounds (high 7.1)
- [CVE-2022-49162](https://insights.sbomify.com/CVE-2022-49162/): video: fbdev: sm712fb: Fix crash in smtcfb_write() (high 7.8)
- [CVE-2022-49161](https://insights.sbomify.com/CVE-2022-49161/): ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe (medium 5.5)
- [CVE-2022-49160](https://insights.sbomify.com/CVE-2022-49160/): scsi: qla2xxx: Fix crash during module load unload test (high 7.5)
- [CVE-2022-4916](https://insights.sbomify.com/CVE-2022-4916/): Use after free in Chrome (high 8.8)
- [CVE-2022-49159](https://insights.sbomify.com/CVE-2022-49159/): scsi: qla2xxx: Implement ref count for SRB (high 8.8)
- [CVE-2022-49158](https://insights.sbomify.com/CVE-2022-49158/): scsi: qla2xxx: Fix warning message due to adisc being flushed (medium 5.5)
- [CVE-2022-49157](https://insights.sbomify.com/CVE-2022-49157/): scsi: qla2xxx: Fix premature hw access after PCI error (medium 5.5)
- [CVE-2022-49156](https://insights.sbomify.com/CVE-2022-49156/): scsi: qla2xxx: Fix scheduling while atomic (medium 5.5)
- [CVE-2022-49155](https://insights.sbomify.com/CVE-2022-49155/): scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (medium 5.5)
- [CVE-2022-49154](https://insights.sbomify.com/CVE-2022-49154/): KVM: SVM: fix panic on out-of-bounds guest IRQ (high 7.8)
- [CVE-2022-49153](https://insights.sbomify.com/CVE-2022-49153/): wireguard: socket: free skb in send6 when ipv6 is disabled (medium 5.5)
- [CVE-2022-49152](https://insights.sbomify.com/CVE-2022-49152/): XArray: Fix xas_create_range() when multi-order entry present (medium 4.7)
- [CVE-2022-49151](https://insights.sbomify.com/CVE-2022-49151/): can: mcba_usb: properly check endpoint type (medium 5.5)
- [CVE-2022-49150](https://insights.sbomify.com/CVE-2022-49150/): rtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sram (medium 5.5)
- [CVE-2022-4915](https://insights.sbomify.com/CVE-2022-4915/): Other in Chrome (medium 6.5)
- [CVE-2022-49149](https://insights.sbomify.com/CVE-2022-49149/): rxrpc: Fix call timer start racing with call destruction (critical 9.8)
- [CVE-2022-49148](https://insights.sbomify.com/CVE-2022-49148/): watch_queue: Free the page array when watch_queue is dismantled (medium 5.5)
- [CVE-2022-49147](https://insights.sbomify.com/CVE-2022-49147/): block: Fix the maximum minor value is blk_alloc_ext_minor() (medium 5.5)
- [CVE-2022-49146](https://insights.sbomify.com/CVE-2022-49146/): virtio: use virtio_device_ready() in virtio_device_restore() (medium 5.5)
- [CVE-2022-49145](https://insights.sbomify.com/CVE-2022-49145/): ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (high 7.1)
- [CVE-2022-49144](https://insights.sbomify.com/CVE-2022-49144/): io_uring: fix memory leak of uid in files registration (medium 5.5)
- [CVE-2022-49142](https://insights.sbomify.com/CVE-2022-49142/): net: preserve skb_end_offset() in skb_unclone_keeptruesize() (high 7.5)
- [CVE-2022-49141](https://insights.sbomify.com/CVE-2022-49141/): net: dsa: felix: fix possible NULL pointer dereference (medium 5.5)
- [CVE-2022-4914](https://insights.sbomify.com/CVE-2022-4914/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-49139](https://insights.sbomify.com/CVE-2022-49139/): Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (medium 5.5)
- [CVE-2022-49138](https://insights.sbomify.com/CVE-2022-49138/): Bluetooth: hci_event: Ignore multiple conn complete events (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/187/