# Vulnerabilities published in 2022


- [CVE-2022-49137](https://insights.sbomify.com/CVE-2022-49137/): drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (medium 5.5)
- [CVE-2022-49136](https://insights.sbomify.com/CVE-2022-49136/): Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (high 7.8)
- [CVE-2022-49135](https://insights.sbomify.com/CVE-2022-49135/): drm/amd/display: Fix memory leak (medium 5.5)
- [CVE-2022-49134](https://insights.sbomify.com/CVE-2022-49134/): mlxsw: spectrum: Guard against invalid local ports (medium 5.5)
- [CVE-2022-49133](https://insights.sbomify.com/CVE-2022-49133/): drm/amdkfd: svm range restore work deadlock when process exit (medium 5.5)
- [CVE-2022-49132](https://insights.sbomify.com/CVE-2022-49132/): ath11k: pci: fix crash on suspend if board file is not found (medium 5.5)
- [CVE-2022-49131](https://insights.sbomify.com/CVE-2022-49131/): ath11k: fix kernel panic during unload/load ath11k modules (medium 5.5)
- [CVE-2022-49130](https://insights.sbomify.com/CVE-2022-49130/): ath11k: mhi: use mhi_sync_power_up() (medium 5.5)
- [CVE-2022-4913](https://insights.sbomify.com/CVE-2022-4913/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-49129](https://insights.sbomify.com/CVE-2022-49129/): mt76: mt7921: fix crash when startup fails. (high 7.8)
- [CVE-2022-49128](https://insights.sbomify.com/CVE-2022-49128/): drm/bridge: Add missing pm_runtime_put_sync (medium 5.5)
- [CVE-2022-49127](https://insights.sbomify.com/CVE-2022-49127/): ref_tracker: implement use-after-free detection (high 7.0)
- [CVE-2022-49126](https://insights.sbomify.com/CVE-2022-49126/): scsi: mpi3mr: Fix memory leaks (medium 5.5)
- [CVE-2022-49125](https://insights.sbomify.com/CVE-2022-49125/): drm/sprd: fix potential NULL dereference (medium 5.5)
- [CVE-2022-49124](https://insights.sbomify.com/CVE-2022-49124/): x86/mce: Work around an erratum on fast string copy instructions (medium 5.5)
- [CVE-2022-49123](https://insights.sbomify.com/CVE-2022-49123/): ath11k: Fix frames flush failure caused by deadlock (medium 5.5)
- [CVE-2022-49122](https://insights.sbomify.com/CVE-2022-49122/): dm ioctl: prevent potential spectre v1 gadget (medium 5.5)
- [CVE-2022-49121](https://insights.sbomify.com/CVE-2022-49121/): scsi: pm8001: Fix tag leaks on error (medium 5.5)
- [CVE-2022-49120](https://insights.sbomify.com/CVE-2022-49120/): scsi: pm8001: Fix task leak in pm8001_send_abort_all() (medium 5.5)
- [CVE-2022-4912](https://insights.sbomify.com/CVE-2022-4912/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-49119](https://insights.sbomify.com/CVE-2022-49119/): scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (medium 5.5)
- [CVE-2022-49118](https://insights.sbomify.com/CVE-2022-49118/): scsi: hisi_sas: Free irq vectors in order for v3 HW (medium 5.5)
- [CVE-2022-49117](https://insights.sbomify.com/CVE-2022-49117/): mips: ralink: fix a refcount leak in ill_acc_of_setup() (medium 5.5)
- [CVE-2022-49116](https://insights.sbomify.com/CVE-2022-49116/): Bluetooth: use memset avoid memory leaks (medium 5.5)
- [CVE-2022-49115](https://insights.sbomify.com/CVE-2022-49115/): PCI: endpoint: Fix misused goto label (medium 5.5)
- [CVE-2022-49114](https://insights.sbomify.com/CVE-2022-49114/): scsi: libfc: Fix use after free in fc_exch_abts_resp() (high 8.8)
- [CVE-2022-49113](https://insights.sbomify.com/CVE-2022-49113/): powerpc/secvar: fix refcount leak in format_show() (medium 5.5)
- [CVE-2022-49112](https://insights.sbomify.com/CVE-2022-49112/): mt76: fix monitor mode crash with sdio driver (medium 5.5)
- [CVE-2022-49111](https://insights.sbomify.com/CVE-2022-49111/): Bluetooth: Fix use after free in hci_send_acl (high 8.8)
- [CVE-2022-49110](https://insights.sbomify.com/CVE-2022-49110/): netfilter: conntrack: revisit gc autotuning (high 7.5)
- [CVE-2022-4911](https://insights.sbomify.com/CVE-2022-4911/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-49109](https://insights.sbomify.com/CVE-2022-49109/): ceph: fix inode reference leakage in ceph_get_snapdir() (medium 5.5)
- [CVE-2022-49108](https://insights.sbomify.com/CVE-2022-49108/): clk: mediatek: Fix memory leaks on probe (medium 5.5)
- [CVE-2022-49107](https://insights.sbomify.com/CVE-2022-49107/): ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (medium 5.5)
- [CVE-2022-49106](https://insights.sbomify.com/CVE-2022-49106/): staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (medium 5.5)
- [CVE-2022-49105](https://insights.sbomify.com/CVE-2022-49105/): staging: wfx: fix an error handling in wfx_init_common() (medium 5.5)
- [CVE-2022-49104](https://insights.sbomify.com/CVE-2022-49104/): staging: vchiq_core: handle NULL result of find_service_by_handle (medium 5.5)
- [CVE-2022-49103](https://insights.sbomify.com/CVE-2022-49103/): NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (medium 5.5)
- [CVE-2022-49102](https://insights.sbomify.com/CVE-2022-49102/): habanalabs: fix possible memory leak in MMU DR fini (medium 5.5)
- [CVE-2022-49100](https://insights.sbomify.com/CVE-2022-49100/): virtio_console: eliminate anonymous module_init & module_exit (medium 5.5)
- [CVE-2022-4910](https://insights.sbomify.com/CVE-2022-4910/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2022-49099](https://insights.sbomify.com/CVE-2022-49099/): Drivers: hv: vmbus: Fix initialization of device object in vmbus_device_register() (medium 5.5)
- [CVE-2022-49098](https://insights.sbomify.com/CVE-2022-49098/): Drivers: hv: vmbus: Fix potential crash on module unload (medium 5.5)
- [CVE-2022-49097](https://insights.sbomify.com/CVE-2022-49097/): NFS: Avoid writeback threads getting stuck in mempool_alloc() (medium 5.5)
- [CVE-2022-49096](https://insights.sbomify.com/CVE-2022-49096/): net: sfc: add missing xdp queue reinitialization (high 7.8)
- [CVE-2022-49095](https://insights.sbomify.com/CVE-2022-49095/): scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (medium 5.5)
- [CVE-2022-49094](https://insights.sbomify.com/CVE-2022-49094/): net/tls: fix slab-out-of-bounds bug in decrypt_internal (critical 9.8)
- [CVE-2022-49093](https://insights.sbomify.com/CVE-2022-49093/): skbuff: fix coalescing for page_pool fragment recycling (critical 9.8)
- [CVE-2022-49092](https://insights.sbomify.com/CVE-2022-49092/): net: ipv4: fix route with nexthop object delete warning (high 7.1)
- [CVE-2022-49091](https://insights.sbomify.com/CVE-2022-49091/): drm/imx: Fix memory leak in imx_pd_connector_get_modes (medium 5.5)
- [CVE-2022-49090](https://insights.sbomify.com/CVE-2022-49090/): arch/arm64: Fix topology initialization for core scheduling (medium 5.5)
- [CVE-2022-4909](https://insights.sbomify.com/CVE-2022-4909/): Security feature bypass in Chrome (medium 6.3)
- [CVE-2022-49089](https://insights.sbomify.com/CVE-2022-49089/): IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (high 7.8)
- [CVE-2022-49088](https://insights.sbomify.com/CVE-2022-49088/): dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (medium 5.5)
- [CVE-2022-49087](https://insights.sbomify.com/CVE-2022-49087/): rxrpc: fix a race in rxrpc_exit_net() (high 7.8)
- [CVE-2022-49086](https://insights.sbomify.com/CVE-2022-49086/): net: openvswitch: fix leak of nested actions (medium 5.5)
- [CVE-2022-49085](https://insights.sbomify.com/CVE-2022-49085/): drbd: Fix five use after free bugs in get_initial_state (high 7.8)
- [CVE-2022-49084](https://insights.sbomify.com/CVE-2022-49084/): qede: confirm skb is allocated before using (high 7.5)
- [CVE-2022-49083](https://insights.sbomify.com/CVE-2022-49083/): iommu/omap: Fix regression in probe for NULL pointer dereference (medium 5.5)
- [CVE-2022-49082](https://insights.sbomify.com/CVE-2022-49082/): scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() (high 7.8)
- [CVE-2022-49081](https://insights.sbomify.com/CVE-2022-49081/): highmem: fix checks in __kmap_local_sched_{in,out} (medium 5.5)
- [CVE-2022-49080](https://insights.sbomify.com/CVE-2022-49080/): mm/mempolicy: fix mpol_new leak in shared_policy_replace (medium 5.5)
- [CVE-2022-4908](https://insights.sbomify.com/CVE-2022-4908/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-49079](https://insights.sbomify.com/CVE-2022-49079/): btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone (medium 5.5)
- [CVE-2022-49078](https://insights.sbomify.com/CVE-2022-49078/): lz4: fix LZ4_decompress_safe_partial read out of bound (high 7.8)
- [CVE-2022-49077](https://insights.sbomify.com/CVE-2022-49077/): mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (medium 5.5)
- [CVE-2022-49076](https://insights.sbomify.com/CVE-2022-49076/): RDMA/hfi1: Fix use-after-free bug for mm struct (high 7.8)
- [CVE-2022-49075](https://insights.sbomify.com/CVE-2022-49075/): btrfs: fix qgroup reserve overflow the qgroup limit (high 8.1)
- [CVE-2022-49074](https://insights.sbomify.com/CVE-2022-49074/): irqchip/gic-v3: Fix GICR_CTLR.RWP polling (medium 5.5)
- [CVE-2022-49073](https://insights.sbomify.com/CVE-2022-49073/): ata: sata_dwc_460ex: Fix crash due to OOB write (high 7.8)
- [CVE-2022-49072](https://insights.sbomify.com/CVE-2022-49072/): gpio: Restrict usage of GPIO chip irq members before initialization (medium 5.5)
- [CVE-2022-49071](https://insights.sbomify.com/CVE-2022-49071/): drm/panel: ili9341: fix optional regulator handling (medium 5.5)
- [CVE-2022-49070](https://insights.sbomify.com/CVE-2022-49070/): fbdev: Fix unregistering of framebuffers without device (medium 5.5)
- [CVE-2022-4907](https://insights.sbomify.com/CVE-2022-4907/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-49069](https://insights.sbomify.com/CVE-2022-49069/): drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw (medium 5.5)
- [CVE-2022-49068](https://insights.sbomify.com/CVE-2022-49068/): btrfs: release correct delalloc amount in direct IO write path (medium 5.5)
- [CVE-2022-49067](https://insights.sbomify.com/CVE-2022-49067/): powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (medium 5.5)
- [CVE-2022-49066](https://insights.sbomify.com/CVE-2022-49066/): veth: Ensure eth header is in skb's linear part (medium 5.5)
- [CVE-2022-49065](https://insights.sbomify.com/CVE-2022-49065/): SUNRPC: Fix the svc_deferred_event trace class (high 7.5)
- [CVE-2022-49064](https://insights.sbomify.com/CVE-2022-49064/): cachefiles: unmark inode in use in error path (medium 5.5)
- [CVE-2022-49063](https://insights.sbomify.com/CVE-2022-49063/): ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (high 7.8)
- [CVE-2022-49062](https://insights.sbomify.com/CVE-2022-49062/): cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr (high 7.8)
- [CVE-2022-49061](https://insights.sbomify.com/CVE-2022-49061/): net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (medium 5.5)
- [CVE-2022-49060](https://insights.sbomify.com/CVE-2022-49060/): net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (medium 5.5)
- [CVE-2022-4906](https://insights.sbomify.com/CVE-2022-4906/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-49059](https://insights.sbomify.com/CVE-2022-49059/): nfc: nci: add flush_workqueue to prevent uaf (high 7.8)
- [CVE-2022-49058](https://insights.sbomify.com/CVE-2022-49058/): cifs: potential buffer overflow in handling symlinks (critical 9.1)
- [CVE-2022-49057](https://insights.sbomify.com/CVE-2022-49057/): block: null_blk: end timed out poll request (medium 5.5)
- [CVE-2022-49055](https://insights.sbomify.com/CVE-2022-49055/): drm/amdkfd: Check for potential null return of kmalloc_array() (medium 5.5)
- [CVE-2022-49054](https://insights.sbomify.com/CVE-2022-49054/): Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests (high 7.1)
- [CVE-2022-49053](https://insights.sbomify.com/CVE-2022-49053/): scsi: target: tcmu: Fix possible page UAF (high 7.8)
- [CVE-2022-49052](https://insights.sbomify.com/CVE-2022-49052/): mm: fix unexpected zeroed page mapping with zram swap (high 7.1)
- [CVE-2022-49051](https://insights.sbomify.com/CVE-2022-49051/): net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (medium 6.8)
- [CVE-2022-49050](https://insights.sbomify.com/CVE-2022-49050/): memory: renesas-rpc-if: fix platform-device leak in error path (medium 5.5)
- [CVE-2022-4905](https://insights.sbomify.com/CVE-2022-4905/): UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting (low 3.5)
- [CVE-2022-49049](https://insights.sbomify.com/CVE-2022-49049/): mm/secretmem: fix panic when growing a memfd_secret (medium 5.5)
- [CVE-2022-49048](https://insights.sbomify.com/CVE-2022-49048/): ipv6: fix panic when forwarding a pkt with no in6 dev (high 7.5)
- [CVE-2022-49047](https://insights.sbomify.com/CVE-2022-49047/): ep93xx: clock: Fix UAF in ep93xx_clk_register_gate() (high 7.8)
- [CVE-2022-49046](https://insights.sbomify.com/CVE-2022-49046/): i2c: dev: check return value when calling dev_set_name() (medium 5.5)
- [CVE-2022-49044](https://insights.sbomify.com/CVE-2022-49044/): dm integrity: fix memory corruption when tag_size is less than digest size (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/188/