# Vulnerabilities published in 2022


- [CVE-2022-48855](https://insights.sbomify.com/CVE-2022-48855/): sctp: fix kernel-infoleak for SCTP sockets (high 7.1)
- [CVE-2022-48854](https://insights.sbomify.com/CVE-2022-48854/): net: arc_emac: Fix use after free in arc_mdio_probe() (high 7.8)
- [CVE-2022-48853](https://insights.sbomify.com/CVE-2022-48853/): Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (medium 5.5)
- [CVE-2022-48852](https://insights.sbomify.com/CVE-2022-48852/): drm/vc4: hdmi: Unregister codec device on unbind (low 3.3)
- [CVE-2022-48851](https://insights.sbomify.com/CVE-2022-48851/): staging: gdm724x: fix use after free in gdm_lte_rx() (critical 9.8)
- [CVE-2022-48850](https://insights.sbomify.com/CVE-2022-48850/): net-sysfs: add check for netdevice being present to speed_show (medium 5.5)
- [CVE-2022-4885](https://insights.sbomify.com/CVE-2022-4885/): sviehb jefferson path traversal (medium 5.0)
- [CVE-2022-48849](https://insights.sbomify.com/CVE-2022-48849/): drm/amdgpu: bypass tiling flag check in virtual display case (v2) (medium 5.5)
- [CVE-2022-48848](https://insights.sbomify.com/CVE-2022-48848/): tracing/osnoise: Do not unregister events twice (high 7.8)
- [CVE-2022-48847](https://insights.sbomify.com/CVE-2022-48847/): watch_queue: Fix filter limit check (high 7.8)
- [CVE-2022-48846](https://insights.sbomify.com/CVE-2022-48846/): block: release rq qos structures for queue without disk (medium 5.5)
- [CVE-2022-48845](https://insights.sbomify.com/CVE-2022-48845/): MIPS: smp: fill in sibling and core maps earlier (medium 5.5)
- [CVE-2022-48844](https://insights.sbomify.com/CVE-2022-48844/): Bluetooth: hci_core: Fix leaking sent_cmd skb (medium 5.5)
- [CVE-2022-48842](https://insights.sbomify.com/CVE-2022-48842/): ice: Fix race condition during interface enslave (medium 4.7)
- [CVE-2022-48841](https://insights.sbomify.com/CVE-2022-48841/): ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (medium 5.5)
- [CVE-2022-48840](https://insights.sbomify.com/CVE-2022-48840/): iavf: Fix hang during reboot/shutdown (medium 5.5)
- [CVE-2022-4884](https://insights.sbomify.com/CVE-2022-4884/): Path-Traversal in MKP storing (low 3.5)
- [CVE-2022-48839](https://insights.sbomify.com/CVE-2022-48839/): net/packet: fix slab-out-of-bounds access in packet_recvmsg() (high 7.8)
- [CVE-2022-48838](https://insights.sbomify.com/CVE-2022-48838/): usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (medium 5.5)
- [CVE-2022-48837](https://insights.sbomify.com/CVE-2022-48837/): usb: gadget: rndis: prevent integer overflow in rndis_set_response() (high 7.8)
- [CVE-2022-48836](https://insights.sbomify.com/CVE-2022-48836/): Input: aiptek - properly check endpoint type (medium 5.5)
- [CVE-2022-48835](https://insights.sbomify.com/CVE-2022-48835/): scsi: mpt3sas: Page fault in reply q processing (medium 5.5)
- [CVE-2022-48834](https://insights.sbomify.com/CVE-2022-48834/): usb: usbtmc: Fix bug in pipe direction for control transfers (high 7.8)
- [CVE-2022-48833](https://insights.sbomify.com/CVE-2022-48833/): btrfs: skip reserved bytes warning on unmount after log cleanup failure (medium 5.5)
- [CVE-2022-48832](https://insights.sbomify.com/CVE-2022-48832/): audit: don't deref the syscall args when checking the openat2 open_how::flags (medium 5.5)
- [CVE-2022-48831](https://insights.sbomify.com/CVE-2022-48831/): ima: fix reference leak in asymmetric_verify() (medium 5.5)
- [CVE-2022-48830](https://insights.sbomify.com/CVE-2022-48830/): can: isotp: fix potential CAN frame reception race in isotp_rcv() (high 8.8)
- [CVE-2022-4883](https://insights.sbomify.com/CVE-2022-4883/): Other in libXpm (high 8.8)
- [CVE-2022-48829](https://insights.sbomify.com/CVE-2022-48829/): NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (critical 9.1)
- [CVE-2022-48828](https://insights.sbomify.com/CVE-2022-48828/): NFSD: Fix ia_size underflow (critical 9.1)
- [CVE-2022-48827](https://insights.sbomify.com/CVE-2022-48827/): NFSD: Fix the behavior of READ near OFFSET_MAX (high 7.5)
- [CVE-2022-48826](https://insights.sbomify.com/CVE-2022-48826/): drm/vc4: Fix deadlock on DSI device attach error (medium 5.5)
- [CVE-2022-48825](https://insights.sbomify.com/CVE-2022-48825/): scsi: qedf: Add stag_work to all the vports (medium 5.5)
- [CVE-2022-48824](https://insights.sbomify.com/CVE-2022-48824/): scsi: myrs: Fix crash in error case (medium 5.5)
- [CVE-2022-48823](https://insights.sbomify.com/CVE-2022-48823/): scsi: qedf: Fix refcount issue when LOGO is received during TMF (medium 5.5)
- [CVE-2022-48822](https://insights.sbomify.com/CVE-2022-48822/): usb: f_fs: Fix use-after-free for epfile (high 7.8)
- [CVE-2022-48821](https://insights.sbomify.com/CVE-2022-48821/): misc: fastrpc: avoid double fput() on failed usercopy (high 7.8)
- [CVE-2022-48820](https://insights.sbomify.com/CVE-2022-48820/): phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() (high 7.1)
- [CVE-2022-4882](https://insights.sbomify.com/CVE-2022-4882/): kaltura mwEmbed Share Plugin share.js cross site scripting (low 2.6)
- [CVE-2022-48819](https://insights.sbomify.com/CVE-2022-48819/): tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case (medium 5.5)
- [CVE-2022-48818](https://insights.sbomify.com/CVE-2022-48818/): net: dsa: mv88e6xxx: don't use devres for mdiobus (medium 5.5)
- [CVE-2022-48817](https://insights.sbomify.com/CVE-2022-48817/): net: dsa: ar9331: register the mdiobus under devres (medium 5.5)
- [CVE-2022-48816](https://insights.sbomify.com/CVE-2022-48816/): SUNRPC: lock against ->sock changing during sysfs read (high 7.8)
- [CVE-2022-48815](https://insights.sbomify.com/CVE-2022-48815/): net: dsa: bcm_sf2: don't use devres for mdiobus (medium 5.5)
- [CVE-2022-48814](https://insights.sbomify.com/CVE-2022-48814/): net: dsa: seville: register the mdiobus under devres (medium 5.5)
- [CVE-2022-48813](https://insights.sbomify.com/CVE-2022-48813/): net: dsa: felix: don't use devres for mdiobus (medium 5.5)
- [CVE-2022-48812](https://insights.sbomify.com/CVE-2022-48812/): net: dsa: lantiq_gswip: don't use devres for mdiobus (medium 5.5)
- [CVE-2022-48811](https://insights.sbomify.com/CVE-2022-48811/): ibmvnic: don't release napi in __ibmvnic_open() (medium 5.5)
- [CVE-2022-48810](https://insights.sbomify.com/CVE-2022-48810/): ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (medium 5.5)
- [CVE-2022-4881](https://insights.sbomify.com/CVE-2022-4881/): CapsAdmin PAC3 http.lua cross site scripting (medium 4.3)
- [CVE-2022-48809](https://insights.sbomify.com/CVE-2022-48809/): net: fix a memleak when uncloning an skb dst and its metadata (medium 5.5)
- [CVE-2022-48808](https://insights.sbomify.com/CVE-2022-48808/): net: dsa: fix panic when DSA master device unbinds on shutdown (medium 5.5)
- [CVE-2022-48807](https://insights.sbomify.com/CVE-2022-48807/): ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (medium 5.5)
- [CVE-2022-48806](https://insights.sbomify.com/CVE-2022-48806/): eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX (medium 5.5)
- [CVE-2022-48805](https://insights.sbomify.com/CVE-2022-48805/): net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (high 7.8)
- [CVE-2022-48804](https://insights.sbomify.com/CVE-2022-48804/): vt_ioctl: fix array_index_nospec in vt_setactivate (medium 5.5)
- [CVE-2022-48803](https://insights.sbomify.com/CVE-2022-48803/): phy: ti: Fix missing sentinel for clk_div_table (high 7.3)
- [CVE-2022-48802](https://insights.sbomify.com/CVE-2022-48802/): fs/proc: task_mmu.c: don't read mapcount for migration entry (medium 5.5)
- [CVE-2022-48801](https://insights.sbomify.com/CVE-2022-48801/): iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL (high 7.8)
- [CVE-2022-48800](https://insights.sbomify.com/CVE-2022-48800/): mm: vmscan: remove deadlock due to throttling failing to make progress (medium 5.5)
- [CVE-2022-4880](https://insights.sbomify.com/CVE-2022-4880/): stakira OpenUtau ZIP Archive VoicebankInstaller.cs VoicebankInstaller path traversal (medium 5.5)
- [CVE-2022-48799](https://insights.sbomify.com/CVE-2022-48799/): perf: Fix list corruption in perf_cgroup_switch() (medium 5.5)
- [CVE-2022-48798](https://insights.sbomify.com/CVE-2022-48798/): s390/cio: verify the driver availability for path_event call (medium 5.5)
- [CVE-2022-48797](https://insights.sbomify.com/CVE-2022-48797/): mm: don't try to NUMA-migrate COW pages that have other uses (high 7.1)
- [CVE-2022-48796](https://insights.sbomify.com/CVE-2022-48796/): iommu: Fix potential use-after-free during probe (high 7.8)
- [CVE-2022-48795](https://insights.sbomify.com/CVE-2022-48795/): parisc: Fix data TLB miss in sba_unmap_sg (medium 5.5)
- [CVE-2022-48794](https://insights.sbomify.com/CVE-2022-48794/): net: ieee802154: at86rf230: Stop leaking skb's (medium 5.5)
- [CVE-2022-48793](https://insights.sbomify.com/CVE-2022-48793/): KVM: x86: nSVM: fix potential NULL derefernce on nested migration (medium 5.5)
- [CVE-2022-48792](https://insights.sbomify.com/CVE-2022-48792/): scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (high 7.8)
- [CVE-2022-48791](https://insights.sbomify.com/CVE-2022-48791/): scsi: pm8001: Fix use-after-free for aborted TMF sas_task (high 7.8)
- [CVE-2022-48790](https://insights.sbomify.com/CVE-2022-48790/): nvme: fix a possible use-after-free in controller reset during load (critical 9.8)
- [CVE-2022-4879](https://insights.sbomify.com/CVE-2022-4879/): Forged Alliance Forever Vote improper authorization (medium 4.6)
- [CVE-2022-48789](https://insights.sbomify.com/CVE-2022-48789/): nvme-tcp: fix possible use-after-free in transport error_recovery work (critical 9.8)
- [CVE-2022-48788](https://insights.sbomify.com/CVE-2022-48788/): nvme-rdma: fix possible use-after-free in transport error_recovery work (critical 9.8)
- [CVE-2022-48787](https://insights.sbomify.com/CVE-2022-48787/): iwlwifi: fix use-after-free (high 7.8)
- [CVE-2022-48786](https://insights.sbomify.com/CVE-2022-48786/): vsock: remove vsock from connected table when connect is interrupted by a signal (high 7.8)
- [CVE-2022-48785](https://insights.sbomify.com/CVE-2022-48785/): ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (high 8.8)
- [CVE-2022-48784](https://insights.sbomify.com/CVE-2022-48784/): cfg80211: fix race in netlink owner interface destruction (medium 4.7)
- [CVE-2022-48783](https://insights.sbomify.com/CVE-2022-48783/): net: dsa: lantiq_gswip: fix use after free in gswip_remove() (high 7.8)
- [CVE-2022-48782](https://insights.sbomify.com/CVE-2022-48782/): mctp: fix use after free (high 8.8)
- [CVE-2022-48781](https://insights.sbomify.com/CVE-2022-48781/): crypto: af_alg - get rid of alg_memory_allocated (medium 5.5)
- [CVE-2022-48780](https://insights.sbomify.com/CVE-2022-48780/): net/smc: Avoid overwriting the copies of clcsock callback functions (medium 5.5)
- [CVE-2022-4878](https://insights.sbomify.com/CVE-2022-4878/): JATOS ZIP ZipUtil.java ZipUtil path traversal (medium 5.5)
- [CVE-2022-48779](https://insights.sbomify.com/CVE-2022-48779/): net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() (high 7.8)
- [CVE-2022-48778](https://insights.sbomify.com/CVE-2022-48778/): mtd: rawnand: gpmi: don't leak PM reference in error path (high 7.8)
- [CVE-2022-48777](https://insights.sbomify.com/CVE-2022-48777/): mtd: parsers: qcom: Fix kernel panic on skipped partition (medium 5.5)
- [CVE-2022-48776](https://insights.sbomify.com/CVE-2022-48776/): mtd: parsers: qcom: Fix missing free for pparts in cleanup (medium 5.5)
- [CVE-2022-48775](https://insights.sbomify.com/CVE-2022-48775/): Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj (medium 5.5)
- [CVE-2022-48774](https://insights.sbomify.com/CVE-2022-48774/): dmaengine: ptdma: Fix the error handling path in pt_core_init() (medium 5.5)
- [CVE-2022-48773](https://insights.sbomify.com/CVE-2022-48773/): xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (medium 5.5)
- [CVE-2022-48772](https://insights.sbomify.com/CVE-2022-48772/): media: lgdt3306a: Add a check against null-pointer-def (medium 5.5)
- [CVE-2022-48771](https://insights.sbomify.com/CVE-2022-48771/): drm/vmwgfx: Fix stale file descriptors on failed usercopy (high 7.8)
- [CVE-2022-48770](https://insights.sbomify.com/CVE-2022-48770/): bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() (medium 5.5)
- [CVE-2022-4877](https://insights.sbomify.com/CVE-2022-4877/): snoyberg keter Proxy.hs cross site scripting (low 3.5)
- [CVE-2022-48769](https://insights.sbomify.com/CVE-2022-48769/): efi: runtime: avoid EFIv2 runtime services on Apple x86 machines (medium 5.5)
- [CVE-2022-48768](https://insights.sbomify.com/CVE-2022-48768/): tracing/histogram: Fix a potential memory leak for kstrdup() (medium 5.5)
- [CVE-2022-48767](https://insights.sbomify.com/CVE-2022-48767/): ceph: properly put ceph_string reference after async create attempt (medium 5.3)
- [CVE-2022-48766](https://insights.sbomify.com/CVE-2022-48766/): drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. (medium 5.5)
- [CVE-2022-48765](https://insights.sbomify.com/CVE-2022-48765/): KVM: LAPIC: Also cancel preemption timer during SET_LAPIC (medium 5.5)
- [CVE-2022-48764](https://insights.sbomify.com/CVE-2022-48764/): KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/191/