# Vulnerabilities published in 2022


- [CVE-2022-48951](https://insights.sbomify.com/CVE-2022-48951/): ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (high 7.8)
- [CVE-2022-48950](https://insights.sbomify.com/CVE-2022-48950/): perf: Fix perf_pending_task() UaF (high 7.8)
- [CVE-2022-4895](https://insights.sbomify.com/CVE-2022-4895/): Man-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer (high 8.6)
- [CVE-2022-48949](https://insights.sbomify.com/CVE-2022-48949/): igb: Initialize mailbox message for VF reset (medium 5.5)
- [CVE-2022-48948](https://insights.sbomify.com/CVE-2022-48948/): usb: gadget: uvc: Prevent buffer overflow in setup handler (high 7.8)
- [CVE-2022-48947](https://insights.sbomify.com/CVE-2022-48947/): Bluetooth: L2CAP: Fix u8 overflow (medium 5.5)
- [CVE-2022-48946](https://insights.sbomify.com/CVE-2022-48946/): udf: Fix preallocation discarding at indirect extent boundary (medium 5.5)
- [CVE-2022-48945](https://insights.sbomify.com/CVE-2022-48945/): media: vivid: fix compose size exceed boundary (high 7.8)
- [CVE-2022-48944](https://insights.sbomify.com/CVE-2022-48944/): sched: Fix yet more sched_fork() races (medium 5.5)
- [CVE-2022-48943](https://insights.sbomify.com/CVE-2022-48943/): KVM: x86/mmu: make apf token non-zero to fix bug (high 7.1)
- [CVE-2022-48942](https://insights.sbomify.com/CVE-2022-48942/): hwmon: Handle failure to register sensor with thermal zone correctly (medium 5.5)
- [CVE-2022-48941](https://insights.sbomify.com/CVE-2022-48941/): ice: fix concurrent reset and removal of VFs (high 8.8)
- [CVE-2022-48940](https://insights.sbomify.com/CVE-2022-48940/): bpf: Fix crash due to incorrect copy_map_value (high 7.8)
- [CVE-2022-4894](https://insights.sbomify.com/CVE-2022-4894/): Privilege escalation in HP and Samsung Printer software (high 7.3)
- [CVE-2022-48939](https://insights.sbomify.com/CVE-2022-48939/): bpf: Add schedule points in batch ops (low 3.3)
- [CVE-2022-48938](https://insights.sbomify.com/CVE-2022-48938/): CDC-NCM: avoid overflow in sanity checking (medium 5.5)
- [CVE-2022-48937](https://insights.sbomify.com/CVE-2022-48937/): io_uring: add a schedule point in io_add_buffers() (low 3.3)
- [CVE-2022-48935](https://insights.sbomify.com/CVE-2022-48935/): netfilter: nf_tables: unregister flowtable hooks on netns exit (high 7.8)
- [CVE-2022-48934](https://insights.sbomify.com/CVE-2022-48934/): nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (medium 5.5)
- [CVE-2022-48933](https://insights.sbomify.com/CVE-2022-48933/): netfilter: nf_tables: fix memory leak during stateful obj update (medium 5.5)
- [CVE-2022-48932](https://insights.sbomify.com/CVE-2022-48932/): net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (high 7.8)
- [CVE-2022-48931](https://insights.sbomify.com/CVE-2022-48931/): configfs: fix a race in configfs_{,un}register_subsystem() (medium 4.7)
- [CVE-2022-48930](https://insights.sbomify.com/CVE-2022-48930/): RDMA/ib_srp: Fix a deadlock (medium 5.5)
- [CVE-2022-48929](https://insights.sbomify.com/CVE-2022-48929/): bpf: Fix crash due to out of bounds access into reg2btf_ids. (medium 5.5)
- [CVE-2022-48928](https://insights.sbomify.com/CVE-2022-48928/): iio: adc: men_z188_adc: Fix a resource leak in an error handling path (medium 5.5)
- [CVE-2022-48927](https://insights.sbomify.com/CVE-2022-48927/): iio: adc: tsc2046: fix memory corruption by preventing array overflow (high 7.8)
- [CVE-2022-48926](https://insights.sbomify.com/CVE-2022-48926/): usb: gadget: rndis: add spinlock for rndis response list (high 7.8)
- [CVE-2022-48925](https://insights.sbomify.com/CVE-2022-48925/): RDMA/cma: Do not change route.addr.src_addr outside state checks (high 7.8)
- [CVE-2022-48924](https://insights.sbomify.com/CVE-2022-48924/): thermal: int340x: fix memory leak in int3400_notify() (medium 5.5)
- [CVE-2022-48923](https://insights.sbomify.com/CVE-2022-48923/): btrfs: prevent copying too big compressed lzo segment (high 7.8)
- [CVE-2022-48922](https://insights.sbomify.com/CVE-2022-48922/): riscv: fix oops caused by irqsoff latency tracer (medium 5.5)
- [CVE-2022-48921](https://insights.sbomify.com/CVE-2022-48921/): sched/fair: Fix fault in reweight_entity (medium 4.7)
- [CVE-2022-48920](https://insights.sbomify.com/CVE-2022-48920/): btrfs: get rid of warning on transaction commit when using flushoncommit (medium 5.5)
- [CVE-2022-4892](https://insights.sbomify.com/CVE-2022-4892/): MyCMS Visitors Module view.php build_view cross site scripting (low 3.5)
- [CVE-2022-48919](https://insights.sbomify.com/CVE-2022-48919/): cifs: fix double free race when mount fails in cifs_get_root() (high 8.8)
- [CVE-2022-48918](https://insights.sbomify.com/CVE-2022-48918/): iwlwifi: mvm: check debugfs_dir ptr before use (medium 5.5)
- [CVE-2022-48916](https://insights.sbomify.com/CVE-2022-48916/): iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (medium 5.5)
- [CVE-2022-48915](https://insights.sbomify.com/CVE-2022-48915/): thermal: core: Fix TZ_GET_TRIP NULL pointer dereference (medium 5.5)
- [CVE-2022-48914](https://insights.sbomify.com/CVE-2022-48914/): xen/netfront: destroy queues before real_num_tx_queues is zeroed (medium 5.5)
- [CVE-2022-48913](https://insights.sbomify.com/CVE-2022-48913/): blktrace: fix use after free for struct blk_trace (high 7.8)
- [CVE-2022-48912](https://insights.sbomify.com/CVE-2022-48912/): netfilter: fix use-after-free in __nf_register_net_hook() (high 7.8)
- [CVE-2022-48911](https://insights.sbomify.com/CVE-2022-48911/): netfilter: nf_queue: fix possible use-after-free (high 7.8)
- [CVE-2022-48910](https://insights.sbomify.com/CVE-2022-48910/): net: ipv6: ensure we call ipv6_mc_down() at most once (medium 5.5)
- [CVE-2022-4891](https://insights.sbomify.com/CVE-2022-4891/): Sisimai string.rb to_plain redos (low 3.5)
- [CVE-2022-48909](https://insights.sbomify.com/CVE-2022-48909/): net/smc: fix connection leak (medium 5.5)
- [CVE-2022-48908](https://insights.sbomify.com/CVE-2022-48908/): net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (medium 5.5)
- [CVE-2022-48907](https://insights.sbomify.com/CVE-2022-48907/): auxdisplay: lcd2s: Fix memory leak in ->remove() (medium 5.5)
- [CVE-2022-48906](https://insights.sbomify.com/CVE-2022-48906/): mptcp: Correctly set DATA_FIN timeout when number of retransmits is large (medium 5.5)
- [CVE-2022-48905](https://insights.sbomify.com/CVE-2022-48905/): ibmvnic: free reset-work-item when flushing (medium 5.5)
- [CVE-2022-48904](https://insights.sbomify.com/CVE-2022-48904/): iommu/amd: Fix I/O page table memory leak (medium 5.5)
- [CVE-2022-48903](https://insights.sbomify.com/CVE-2022-48903/): btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() (medium 5.5)
- [CVE-2022-48902](https://insights.sbomify.com/CVE-2022-48902/): btrfs: do not WARN_ON() if we have PageError set (medium 5.5)
- [CVE-2022-48901](https://insights.sbomify.com/CVE-2022-48901/): btrfs: do not start relocation until in progress drops are done (medium 5.5)
- [CVE-2022-4890](https://insights.sbomify.com/CVE-2022-4890/): abhilash1985 PredictApp Cookie new_framework_defaults_7_0.rb deserialization (medium 6.3)
- [CVE-2022-48899](https://insights.sbomify.com/CVE-2022-48899/): drm/virtio: Fix GEM handle creation UAF (high 7.8)
- [CVE-2022-48898](https://insights.sbomify.com/CVE-2022-48898/): drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (medium 4.7)
- [CVE-2022-48897](https://insights.sbomify.com/CVE-2022-48897/): arm64/mm: fix incorrect file_map_count for invalid pmd (medium 5.5)
- [CVE-2022-48896](https://insights.sbomify.com/CVE-2022-48896/): ixgbe: fix pci device refcount leak (medium 5.5)
- [CVE-2022-48895](https://insights.sbomify.com/CVE-2022-48895/): iommu/arm-smmu: Don't unregister on shutdown (medium 5.5)
- [CVE-2022-48894](https://insights.sbomify.com/CVE-2022-48894/): iommu/arm-smmu-v3: Don't unregister on shutdown (medium 5.5)
- [CVE-2022-48893](https://insights.sbomify.com/CVE-2022-48893/): drm/i915/gt: Cleanup partial engine discovery failures (medium 5.5)
- [CVE-2022-48892](https://insights.sbomify.com/CVE-2022-48892/): sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (high 7.8)
- [CVE-2022-48891](https://insights.sbomify.com/CVE-2022-48891/): regulator: da9211: Use irq handler when ready (medium 5.5)
- [CVE-2022-48890](https://insights.sbomify.com/CVE-2022-48890/): scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (medium 5.5)
- [CVE-2022-4889](https://insights.sbomify.com/CVE-2022-4889/): visegripped Stracker api.php getHistory sql injection (medium 5.5)
- [CVE-2022-48889](https://insights.sbomify.com/CVE-2022-48889/): ASoC: Intel: sof-nau8825: fix module alias overflow (medium 5.5)
- [CVE-2022-48888](https://insights.sbomify.com/CVE-2022-48888/): drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path (medium 5.5)
- [CVE-2022-48887](https://insights.sbomify.com/CVE-2022-48887/): drm/vmwgfx: Remove rcu locks from user resources (high 7.8)
- [CVE-2022-48886](https://insights.sbomify.com/CVE-2022-48886/): ice: Add check for kzalloc (medium 5.5)
- [CVE-2022-48885](https://insights.sbomify.com/CVE-2022-48885/): ice: Fix potential memory leak in ice_gnss_tty_write() (medium 5.5)
- [CVE-2022-48884](https://insights.sbomify.com/CVE-2022-48884/): net/mlx5: Fix command stats access after free (medium 5.5)
- [CVE-2022-48883](https://insights.sbomify.com/CVE-2022-48883/): net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (high 7.8)
- [CVE-2022-48882](https://insights.sbomify.com/CVE-2022-48882/): net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (medium 5.5)
- [CVE-2022-48881](https://insights.sbomify.com/CVE-2022-48881/): platform/x86/amd: Fix refcount leak in amd_pmc_probe (high 7.1)
- [CVE-2022-48880](https://insights.sbomify.com/CVE-2022-48880/): platform/surface: aggregator: Add missing call to ssam_request_sync_free() (medium 5.5)
- [CVE-2022-4888](https://insights.sbomify.com/CVE-2022-4888/): Multiple Plugins from Addify - Multiple CSRF (medium 6.5)
- [CVE-2022-48879](https://insights.sbomify.com/CVE-2022-48879/): efi: fix NULL-deref in init error path (medium 5.5)
- [CVE-2022-48878](https://insights.sbomify.com/CVE-2022-48878/): Bluetooth: hci_qca: Fix driver shutdown on closed serdev (high 7.8)
- [CVE-2022-48876](https://insights.sbomify.com/CVE-2022-48876/): wifi: mac80211: fix initialization of rx->link and rx->link_sta (medium 5.5)
- [CVE-2022-48875](https://insights.sbomify.com/CVE-2022-48875/): wifi: mac80211: sdata can be NULL during AMPDU start (medium 5.5)
- [CVE-2022-48874](https://insights.sbomify.com/CVE-2022-48874/): misc: fastrpc: Fix use-after-free and race in fastrpc_map_find (high 7.8)
- [CVE-2022-48873](https://insights.sbomify.com/CVE-2022-48873/): misc: fastrpc: Don't remove map on creater_process and device_release (high 7.8)
- [CVE-2022-48872](https://insights.sbomify.com/CVE-2022-48872/): misc: fastrpc: Fix use-after-free race condition for maps (high 7.8)
- [CVE-2022-48871](https://insights.sbomify.com/CVE-2022-48871/): tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (high 8.8)
- [CVE-2022-48870](https://insights.sbomify.com/CVE-2022-48870/): tty: fix possible null-ptr-defer in spk_ttyio_release (medium 5.5)
- [CVE-2022-48869](https://insights.sbomify.com/CVE-2022-48869/): USB: gadgetfs: Fix race between mounting and unmounting (medium 4.7)
- [CVE-2022-48868](https://insights.sbomify.com/CVE-2022-48868/): dmaengine: idxd: Let probe fail when workqueue cannot be enabled (medium 5.5)
- [CVE-2022-48867](https://insights.sbomify.com/CVE-2022-48867/): dmaengine: idxd: Prevent use after free on completion memory (high 7.8)
- [CVE-2022-48866](https://insights.sbomify.com/CVE-2022-48866/): HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (high 7.1)
- [CVE-2022-48865](https://insights.sbomify.com/CVE-2022-48865/): tipc: fix kernel panic when enabling bearer (medium 5.5)
- [CVE-2022-48864](https://insights.sbomify.com/CVE-2022-48864/): vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command (high 8.8)
- [CVE-2022-48863](https://insights.sbomify.com/CVE-2022-48863/): mISDN: Fix memory leak in dsp_pipeline_build() (medium 5.5)
- [CVE-2022-48862](https://insights.sbomify.com/CVE-2022-48862/): vhost: fix hung thread due to erroneous iotlb entries (medium 5.5)
- [CVE-2022-48861](https://insights.sbomify.com/CVE-2022-48861/): vdpa: fix use-after-free on vp_vdpa_remove (medium 5.5)
- [CVE-2022-48860](https://insights.sbomify.com/CVE-2022-48860/): ethernet: Fix error handling in xemaclite_of_probe (medium 5.5)
- [CVE-2022-4886](https://insights.sbomify.com/CVE-2022-4886/): Ingress-nginx `path` sanitization can be bypassed with `log_format` directive (high 8.8)
- [CVE-2022-48859](https://insights.sbomify.com/CVE-2022-48859/): net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr (medium 5.5)
- [CVE-2022-48858](https://insights.sbomify.com/CVE-2022-48858/): net/mlx5: Fix a race on command flush flow (high 7.0)
- [CVE-2022-48857](https://insights.sbomify.com/CVE-2022-48857/): NFC: port100: fix use-after-free in port100_send_complete (medium 5.5)
- [CVE-2022-48856](https://insights.sbomify.com/CVE-2022-48856/): gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/190/