# Vulnerabilities published in 2022


- [CVE-2022-49043](https://insights.sbomify.com/CVE-2022-49043/): Use after free in libxml2 (high 8.1)
- [CVE-2022-49042](https://insights.sbomify.com/CVE-2022-49042/): Code injection in Synology Hyper Backup Explorer (high 7.8)
- [CVE-2022-49041](https://insights.sbomify.com/CVE-2022-49041/): Memory corruption in Synology Drive Client (medium 4.4)
- [CVE-2022-49040](https://insights.sbomify.com/CVE-2022-49040/): Memory corruption in Synology Drive Client (medium 4.4)
- [CVE-2022-4904](https://insights.sbomify.com/CVE-2022-4904/): Memory corruption in c-ares (high 8.6)
- [CVE-2022-49039](https://insights.sbomify.com/CVE-2022-49039/): Memory corruption in Synology Drive Client (medium 6.7)
- [CVE-2022-49038](https://insights.sbomify.com/CVE-2022-49038/): Code injection in Synology Drive Client (high 7.8)
- [CVE-2022-49037](https://insights.sbomify.com/CVE-2022-49037/): Information disclosure in Synology Drive Client (medium 6.5)
- [CVE-2022-49036](https://insights.sbomify.com/CVE-2022-49036/): Code injection in Synology Active Backup for Business Recovery Media Creator (high 7.8)
- [CVE-2022-49035](https://insights.sbomify.com/CVE-2022-49035/): media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (medium 5.5)
- [CVE-2022-49034](https://insights.sbomify.com/CVE-2022-49034/): sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (medium 5.5)
- [CVE-2022-49033](https://insights.sbomify.com/CVE-2022-49033/): btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (medium 5.5)
- [CVE-2022-49032](https://insights.sbomify.com/CVE-2022-49032/): iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (high 7.1)
- [CVE-2022-49031](https://insights.sbomify.com/CVE-2022-49031/): iio: health: afe4403: Fix oob read in afe4403_read_raw (high 7.1)
- [CVE-2022-49030](https://insights.sbomify.com/CVE-2022-49030/): libbpf: Handle size overflow for ringbuf mmap (high 7.8)
- [CVE-2022-4903](https://insights.sbomify.com/CVE-2022-4903/): CodenameOne implicit intent for sensitive communication (medium 5.0)
- [CVE-2022-49029](https://insights.sbomify.com/CVE-2022-49029/): hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (high 7.8)
- [CVE-2022-49028](https://insights.sbomify.com/CVE-2022-49028/): ixgbevf: Fix resource leak in ixgbevf_init_module() (medium 5.5)
- [CVE-2022-49027](https://insights.sbomify.com/CVE-2022-49027/): iavf: Fix error handling in iavf_init_module() (medium 5.5)
- [CVE-2022-49026](https://insights.sbomify.com/CVE-2022-49026/): e100: Fix possible use after free in e100_xmit_prepare (high 7.8)
- [CVE-2022-49025](https://insights.sbomify.com/CVE-2022-49025/): net/mlx5e: Fix use-after-free when reverting termination table (high 7.8)
- [CVE-2022-49024](https://insights.sbomify.com/CVE-2022-49024/): can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (medium 5.5)
- [CVE-2022-49023](https://insights.sbomify.com/CVE-2022-49023/): wifi: cfg80211: fix buffer overflow in elem comparison (high 7.1)
- [CVE-2022-49022](https://insights.sbomify.com/CVE-2022-49022/): wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (high 8.1)
- [CVE-2022-49021](https://insights.sbomify.com/CVE-2022-49021/): net: phy: fix null-ptr-deref while probe() failed (medium 5.5)
- [CVE-2022-49020](https://insights.sbomify.com/CVE-2022-49020/): net/9p: Fix a potential socket leak in p9_socket_open (medium 5.5)
- [CVE-2022-4902](https://insights.sbomify.com/CVE-2022-4902/): eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting (low 3.5)
- [CVE-2022-49019](https://insights.sbomify.com/CVE-2022-49019/): net: ethernet: nixge: fix NULL dereference (medium 5.5)
- [CVE-2022-49018](https://insights.sbomify.com/CVE-2022-49018/): mptcp: fix sleep in atomic at close time (medium 5.5)
- [CVE-2022-49017](https://insights.sbomify.com/CVE-2022-49017/): tipc: re-fetch skb cb after tipc_msg_validate (high 8.8)
- [CVE-2022-49016](https://insights.sbomify.com/CVE-2022-49016/): net: mdiobus: fix unbalanced node reference count (medium 5.5)
- [CVE-2022-49015](https://insights.sbomify.com/CVE-2022-49015/): net: hsr: Fix potential use-after-free (high 8.8)
- [CVE-2022-49014](https://insights.sbomify.com/CVE-2022-49014/): net: tun: Fix use-after-free in tun_detach() (high 7.8)
- [CVE-2022-49013](https://insights.sbomify.com/CVE-2022-49013/): sctp: fix memory leak in sctp_stream_outq_migrate() (medium 5.5)
- [CVE-2022-49012](https://insights.sbomify.com/CVE-2022-49012/): afs: Fix server->active leak in afs_put_server (medium 5.5)
- [CVE-2022-49011](https://insights.sbomify.com/CVE-2022-49011/): hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (medium 5.5)
- [CVE-2022-49010](https://insights.sbomify.com/CVE-2022-49010/): hwmon: (coretemp) Check for null before removing sysfs attrs (medium 5.5)
- [CVE-2022-4901](https://insights.sbomify.com/CVE-2022-4901/): Cross-site scripting in Sophos Connect Client (low 3.3)
- [CVE-2022-49009](https://insights.sbomify.com/CVE-2022-49009/): hwmon: (asus-ec-sensors) Add checks for devm_kcalloc (medium 5.5)
- [CVE-2022-49008](https://insights.sbomify.com/CVE-2022-49008/): can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down (medium 5.5)
- [CVE-2022-49007](https://insights.sbomify.com/CVE-2022-49007/): nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (medium 5.5)
- [CVE-2022-49006](https://insights.sbomify.com/CVE-2022-49006/): tracing: Free buffers when a used dynamic event is removed (high 7.8)
- [CVE-2022-49005](https://insights.sbomify.com/CVE-2022-49005/): ASoC: ops: Fix bounds check for _sx controls (medium 5.5)
- [CVE-2022-49004](https://insights.sbomify.com/CVE-2022-49004/): riscv: Sync efi page table's kernel mappings before switching (medium 5.5)
- [CVE-2022-49003](https://insights.sbomify.com/CVE-2022-49003/): nvme: fix SRCU protection of nvme_ns_head list (critical 9.8)
- [CVE-2022-49002](https://insights.sbomify.com/CVE-2022-49002/): iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (medium 5.5)
- [CVE-2022-49001](https://insights.sbomify.com/CVE-2022-49001/): riscv: fix race when vmap stack overflow (high 7.0)
- [CVE-2022-49000](https://insights.sbomify.com/CVE-2022-49000/): iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (medium 5.5)
- [CVE-2022-4900](https://insights.sbomify.com/CVE-2022-4900/): Potential buffer overflow in php_cli_server_startup_workers (medium 6.2)
- [CVE-2022-48999](https://insights.sbomify.com/CVE-2022-48999/): ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (high 7.1)
- [CVE-2022-48998](https://insights.sbomify.com/CVE-2022-48998/): powerpc/bpf/32: Fix Oops on tail call tests (high 7.8)
- [CVE-2022-48997](https://insights.sbomify.com/CVE-2022-48997/): char: tpm: Protect tpm_pm_suspend with locks (medium 4.7)
- [CVE-2022-48996](https://insights.sbomify.com/CVE-2022-48996/): mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes() (medium 5.5)
- [CVE-2022-48995](https://insights.sbomify.com/CVE-2022-48995/): Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (medium 5.5)
- [CVE-2022-48994](https://insights.sbomify.com/CVE-2022-48994/): ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (medium 5.5)
- [CVE-2022-48992](https://insights.sbomify.com/CVE-2022-48992/): ASoC: soc-pcm: Add NULL check in BE reparenting (medium 5.5)
- [CVE-2022-48991](https://insights.sbomify.com/CVE-2022-48991/): mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (high 8.8)
- [CVE-2022-48990](https://insights.sbomify.com/CVE-2022-48990/): drm/amdgpu: fix use-after-free during gpu recovery (high 7.8)
- [CVE-2022-4899](https://insights.sbomify.com/CVE-2022-4899/): zstd vulnerable to buffer overrun (high 7.5)
- [CVE-2022-48989](https://insights.sbomify.com/CVE-2022-48989/): fscache: Fix oops due to race with cookie_lru and use_cookie (high 7.8)
- [CVE-2022-48988](https://insights.sbomify.com/CVE-2022-48988/): memcg: fix possible use-after-free in memcg_write_event_control() (high 7.8)
- [CVE-2022-48987](https://insights.sbomify.com/CVE-2022-48987/): media: v4l2-dv-timings.c: fix too strict blanking sanity checks (medium 5.5)
- [CVE-2022-48986](https://insights.sbomify.com/CVE-2022-48986/): mm/gup: fix gup_pud_range() for dax (high 7.8)
- [CVE-2022-48985](https://insights.sbomify.com/CVE-2022-48985/): net: mana: Fix race on per-CQ variable napi work_done (critical 9.8)
- [CVE-2022-48984](https://insights.sbomify.com/CVE-2022-48984/): can: slcan: fix freed work crash (medium 5.5)
- [CVE-2022-48983](https://insights.sbomify.com/CVE-2022-48983/): io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (medium 5.5)
- [CVE-2022-48982](https://insights.sbomify.com/CVE-2022-48982/): Bluetooth: Fix crash when replugging CSR fake controllers (medium 5.5)
- [CVE-2022-48981](https://insights.sbomify.com/CVE-2022-48981/): drm/shmem-helper: Remove errant put in error path (high 7.8)
- [CVE-2022-48980](https://insights.sbomify.com/CVE-2022-48980/): net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (high 7.8)
- [CVE-2022-4898](https://insights.sbomify.com/CVE-2022-4898/): Cross-site scripting in Octopus Server (medium 5.4)
- [CVE-2022-48979](https://insights.sbomify.com/CVE-2022-48979/): drm/amd/display: fix array index out of bound error in DCN32 DML (high 7.8)
- [CVE-2022-48978](https://insights.sbomify.com/CVE-2022-48978/): HID: core: fix shift-out-of-bounds in hid_report_raw_event (medium 5.5)
- [CVE-2022-48977](https://insights.sbomify.com/CVE-2022-48977/): can: af_can: fix NULL pointer dereference in can_rcv_filter (medium 5.5)
- [CVE-2022-48976](https://insights.sbomify.com/CVE-2022-48976/): netfilter: flowtable_offload: fix using __this_cpu_add in preemptible (medium 5.5)
- [CVE-2022-48975](https://insights.sbomify.com/CVE-2022-48975/): gpiolib: fix memory leak in gpiochip_setup_dev() (medium 5.5)
- [CVE-2022-48974](https://insights.sbomify.com/CVE-2022-48974/): netfilter: conntrack: fix using __this_cpu_add in preemptible (medium 5.5)
- [CVE-2022-48973](https://insights.sbomify.com/CVE-2022-48973/): gpio: amd8111: Fix PCI device reference count leak (medium 5.5)
- [CVE-2022-48972](https://insights.sbomify.com/CVE-2022-48972/): mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (medium 5.5)
- [CVE-2022-48971](https://insights.sbomify.com/CVE-2022-48971/): Bluetooth: Fix not cleanup led when bt_init fails (medium 5.5)
- [CVE-2022-48970](https://insights.sbomify.com/CVE-2022-48970/): af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (medium 5.5)
- [CVE-2022-4897](https://insights.sbomify.com/CVE-2022-4897/): BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-48969](https://insights.sbomify.com/CVE-2022-48969/): xen-netfront: Fix NULL sring after live migration (medium 5.5)
- [CVE-2022-48968](https://insights.sbomify.com/CVE-2022-48968/): octeontx2-pf: Fix potential memory leak in otx2_init_tc() (medium 5.5)
- [CVE-2022-48967](https://insights.sbomify.com/CVE-2022-48967/): NFC: nci: Bounds check struct nfc_target arrays (high 8.8)
- [CVE-2022-48966](https://insights.sbomify.com/CVE-2022-48966/): net: mvneta: Prevent out of bounds read in mvneta_config_rss() (high 7.1)
- [CVE-2022-48965](https://insights.sbomify.com/CVE-2022-48965/): gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (medium 5.5)
- [CVE-2022-48964](https://insights.sbomify.com/CVE-2022-48964/): ravb: Fix potential use-after-free in ravb_rx_gbeth() (high 8.8)
- [CVE-2022-48963](https://insights.sbomify.com/CVE-2022-48963/): net: wwan: iosm: fix memory leak in ipc_mux_init() (medium 5.5)
- [CVE-2022-48962](https://insights.sbomify.com/CVE-2022-48962/): net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (high 8.8)
- [CVE-2022-48961](https://insights.sbomify.com/CVE-2022-48961/): net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (medium 5.5)
- [CVE-2022-48960](https://insights.sbomify.com/CVE-2022-48960/): net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (high 8.8)
- [CVE-2022-4896](https://insights.sbomify.com/CVE-2022-4896/): Denial of service in Control de Ciber (high 8.2)
- [CVE-2022-48959](https://insights.sbomify.com/CVE-2022-48959/): net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (medium 5.5)
- [CVE-2022-48958](https://insights.sbomify.com/CVE-2022-48958/): ethernet: aeroflex: fix potential skb leak in greth_init_rings() (medium 5.5)
- [CVE-2022-48957](https://insights.sbomify.com/CVE-2022-48957/): dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (medium 5.5)
- [CVE-2022-48956](https://insights.sbomify.com/CVE-2022-48956/): ipv6: avoid use-after-free in ip6_fragment() (high 7.8)
- [CVE-2022-48955](https://insights.sbomify.com/CVE-2022-48955/): net: thunderbolt: fix memory leak in tbnet_open() (medium 5.5)
- [CVE-2022-48954](https://insights.sbomify.com/CVE-2022-48954/): s390/qeth: fix use-after-free in hsci (high 8.8)
- [CVE-2022-48953](https://insights.sbomify.com/CVE-2022-48953/): rtc: cmos: Fix event handler registration ordering issue (medium 5.5)
- [CVE-2022-48952](https://insights.sbomify.com/CVE-2022-48952/): PCI: mt7621: Add sentinel to quirks table (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/189/