# Vulnerabilities published in 2022


- [GSD-2022-1007517](https://insights.sbomify.com/GSD-2022-1007517/): clk: tegra: Fix refcount leak in tegra210_clock_init (not scored)
- [GSD-2022-1007516](https://insights.sbomify.com/GSD-2022-1007516/): HSI: omap_ssi: Fix refcount leak in ssi_probe (not scored)
- [GSD-2022-1007515](https://insights.sbomify.com/GSD-2022-1007515/): clk: tegra20: Fix refcount leak in tegra20_clock_init (not scored)
- [GSD-2022-1007514](https://insights.sbomify.com/GSD-2022-1007514/): media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (not scored)
- [GSD-2022-1007513](https://insights.sbomify.com/GSD-2022-1007513/): RDMA/rxe: Fix "kernel NULL pointer dereference" error (not scored)
- [GSD-2022-1007512](https://insights.sbomify.com/GSD-2022-1007512/): md: Replace snprintf with scnprintf (not scored)
- [GSD-2022-1007511](https://insights.sbomify.com/GSD-2022-1007511/): drivers: serial: jsm: fix some leaks in probe (not scored)
- [GSD-2022-1007510](https://insights.sbomify.com/GSD-2022-1007510/): usb: gadget: function: fix dangling pnp_string in f_printer.c (not scored)
- [GSD-2022-1007509](https://insights.sbomify.com/GSD-2022-1007509/): staging: vt6655: fix some erroneous memory clean-up loops (not scored)
- [GSD-2022-1007508](https://insights.sbomify.com/GSD-2022-1007508/): firmware: google: Test spinlock on panic path to avoid lockups (not scored)
- [GSD-2022-1007507](https://insights.sbomify.com/GSD-2022-1007507/): clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (not scored)
- [GSD-2022-1007506](https://insights.sbomify.com/GSD-2022-1007506/): iommu/omap: Fix buffer overflow in debugfs (not scored)
- [GSD-2022-1007505](https://insights.sbomify.com/GSD-2022-1007505/): crypto: cavium - prevent integer overflow loading firmware (not scored)
- [GSD-2022-1007504](https://insights.sbomify.com/GSD-2022-1007504/): powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (not scored)
- [GSD-2022-1007503](https://insights.sbomify.com/GSD-2022-1007503/): thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (not scored)
- [GSD-2022-1007502](https://insights.sbomify.com/GSD-2022-1007502/): tcp: annotate data-race around tcp_md5sig_pool_populated (not scored)
- [GSD-2022-1007501](https://insights.sbomify.com/GSD-2022-1007501/): wifi: brcmfmac: fix invalid address access when enabling SCAN log level (not scored)
- [GSD-2022-1007500](https://insights.sbomify.com/GSD-2022-1007500/): wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (not scored)
- [GSD-2022-1007499](https://insights.sbomify.com/GSD-2022-1007499/): wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (not scored)
- [GSD-2022-1007498](https://insights.sbomify.com/GSD-2022-1007498/): xfrm: Update ipcomp_scratches with NULL when freed (not scored)
- [GSD-2022-1007497](https://insights.sbomify.com/GSD-2022-1007497/): Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (not scored)
- [GSD-2022-1007496](https://insights.sbomify.com/GSD-2022-1007496/): Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (not scored)
- [GSD-2022-1007495](https://insights.sbomify.com/GSD-2022-1007495/): Bluetooth: L2CAP: Fix user-after-free (not scored)
- [GSD-2022-1007494](https://insights.sbomify.com/GSD-2022-1007494/): net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (not scored)
- [GSD-2022-1007493](https://insights.sbomify.com/GSD-2022-1007493/): drm: Use size_t type for len variable in drm_copy_field() (not scored)
- [GSD-2022-1007492](https://insights.sbomify.com/GSD-2022-1007492/): drm: Prevent drm_copy_field() to attempt copying a NULL pointer (not scored)
- [GSD-2022-1007491](https://insights.sbomify.com/GSD-2022-1007491/): drm/amd/display: fix overflow on MIN_I64 definition (not scored)
- [GSD-2022-1007490](https://insights.sbomify.com/GSD-2022-1007490/): media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (not scored)
- [GSD-2022-1007489](https://insights.sbomify.com/GSD-2022-1007489/): nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (not scored)
- [GSD-2022-1007488](https://insights.sbomify.com/GSD-2022-1007488/): power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (not scored)
- [GSD-2022-1007487](https://insights.sbomify.com/GSD-2022-1007487/): staging: vt6655: fix potential memory leak (not scored)
- [GSD-2022-1007486](https://insights.sbomify.com/GSD-2022-1007486/): ata: libahci_platform: Sanity check the DT child nodes number (not scored)
- [GSD-2022-1007485](https://insights.sbomify.com/GSD-2022-1007485/): usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (not scored)
- [GSD-2022-1007484](https://insights.sbomify.com/GSD-2022-1007484/): HID: roccat: Fix use-after-free in roccat_read() (not scored)
- [GSD-2022-1007483](https://insights.sbomify.com/GSD-2022-1007483/): usb: musb: Fix musb_gadget.c rxstate overflow bug (not scored)
- [GSD-2022-1007482](https://insights.sbomify.com/GSD-2022-1007482/): usb: idmouse: fix an uninit-value in idmouse_open (not scored)
- [GSD-2022-1007481](https://insights.sbomify.com/GSD-2022-1007481/): ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (not scored)
- [GSD-2022-1007480](https://insights.sbomify.com/GSD-2022-1007480/): tipc: Fix recognition of trial period (not scored)
- [GSD-2022-1007479](https://insights.sbomify.com/GSD-2022-1007479/): tipc: fix an information leak in tipc_topsrv_kern_subscr (not scored)
- [GSD-2022-1007478](https://insights.sbomify.com/GSD-2022-1007478/): mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (not scored)
- [GSD-2022-1007477](https://insights.sbomify.com/GSD-2022-1007477/): KVM: arm64: vgic: Fix exit condition in scan_its_table() (not scored)
- [GSD-2022-1007476](https://insights.sbomify.com/GSD-2022-1007476/): net: sched: cake: fix null pointer access issue when cake_init() fails (not scored)
- [GSD-2022-1007475](https://insights.sbomify.com/GSD-2022-1007475/): net: hns: fix possible memory leak in hnae_ae_register() (not scored)
- [GSD-2022-1007474](https://insights.sbomify.com/GSD-2022-1007474/): iommu/vt-d: Clean up si_domain in the init_dmars() error path (not scored)
- [GSD-2022-1007473](https://insights.sbomify.com/GSD-2022-1007473/): mm: /proc/pid/smaps_rollup: fix no vma's null-deref (not scored)
- [GSD-2022-1007472](https://insights.sbomify.com/GSD-2022-1007472/): xhci: Remove device endpoints from bandwidth list when freeing the device (not scored)
- [GSD-2022-1007471](https://insights.sbomify.com/GSD-2022-1007471/): fbdev: smscufx: Fix several use-after-free bugs (not scored)
- [GSD-2022-1007470](https://insights.sbomify.com/GSD-2022-1007470/): drm/msm/dsi: fix memory corruption with too many bridges (not scored)
- [GSD-2022-1007469](https://insights.sbomify.com/GSD-2022-1007469/): drm/msm/hdmi: fix memory corruption with too many bridges (not scored)
- [GSD-2022-1007468](https://insights.sbomify.com/GSD-2022-1007468/): mmc: core: Fix kernel panic when remove non-standard SDIO card (not scored)
- [GSD-2022-1007467](https://insights.sbomify.com/GSD-2022-1007467/): kernfs: fix use-after-free in __kernfs_remove (not scored)
- [GSD-2022-1007466](https://insights.sbomify.com/GSD-2022-1007466/): ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (not scored)
- [GSD-2022-1007465](https://insights.sbomify.com/GSD-2022-1007465/): tipc: fix a null-ptr-deref in tipc_topsrv_accept (not scored)
- [GSD-2022-1007464](https://insights.sbomify.com/GSD-2022-1007464/): net: netsec: fix error handling in netsec_register_mdio() (not scored)
- [GSD-2022-1007463](https://insights.sbomify.com/GSD-2022-1007463/): x86/unwind/orc: Fix unreliable stack dump with gcov (not scored)
- [GSD-2022-1007462](https://insights.sbomify.com/GSD-2022-1007462/): kcm: annotate data-races around kcm->rx_wait (not scored)
- [GSD-2022-1007461](https://insights.sbomify.com/GSD-2022-1007461/): kcm: annotate data-races around kcm->rx_psock (not scored)
- [GSD-2022-1007460](https://insights.sbomify.com/GSD-2022-1007460/): net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (not scored)
- [GSD-2022-1007459](https://insights.sbomify.com/GSD-2022-1007459/): ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (not scored)
- [GSD-2022-1007458](https://insights.sbomify.com/GSD-2022-1007458/): net: ehea: fix possible memory leak in ehea_register_port() (not scored)
- [GSD-2022-1007457](https://insights.sbomify.com/GSD-2022-1007457/): openvswitch: switch from WARN to pr_warn (not scored)
- [GSD-2022-1007456](https://insights.sbomify.com/GSD-2022-1007456/): usb: mon: make mmapped memory read only (not scored)
- [GSD-2022-1007455](https://insights.sbomify.com/GSD-2022-1007455/): fs: fix UAF/GPF bug in nilfs_mdt_destroy (not scored)
- [GSD-2022-1007454](https://insights.sbomify.com/GSD-2022-1007454/): nilfs2: fix leak of nilfs_root in case of writer thread creation failure (not scored)
- [GSD-2022-1007453](https://insights.sbomify.com/GSD-2022-1007453/): nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (not scored)
- [GSD-2022-1007452](https://insights.sbomify.com/GSD-2022-1007452/): wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (not scored)
- [GSD-2022-1007451](https://insights.sbomify.com/GSD-2022-1007451/): wifi: cfg80211/mac80211: reject bad MBSSID elements (not scored)
- [GSD-2022-1007450](https://insights.sbomify.com/GSD-2022-1007450/): nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (not scored)
- [GSD-2022-1007449](https://insights.sbomify.com/GSD-2022-1007449/): scsi: stex: Properly zero out the passthrough command structure (not scored)
- [GSD-2022-1007448](https://insights.sbomify.com/GSD-2022-1007448/): nilfs2: fix use-after-free bug of struct nilfs_root (not scored)
- [GSD-2022-1007447](https://insights.sbomify.com/GSD-2022-1007447/): wifi: cfg80211: fix BSS refcounting bugs (not scored)
- [GSD-2022-1007446](https://insights.sbomify.com/GSD-2022-1007446/): wifi: cfg80211: avoid nontransmitted BSS list corruption (not scored)
- [GSD-2022-1007445](https://insights.sbomify.com/GSD-2022-1007445/): wifi: mac80211: fix MBSSID parsing use-after-free (not scored)
- [GSD-2022-1007444](https://insights.sbomify.com/GSD-2022-1007444/): cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (not scored)
- [GSD-2022-1007443](https://insights.sbomify.com/GSD-2022-1007443/): io_uring/af_unix: defer registered files gc to io_uring release (not scored)
- [GSD-2022-1007442](https://insights.sbomify.com/GSD-2022-1007442/): ALSA: usb-audio: Fix potential memory leaks (not scored)
- [GSD-2022-1007441](https://insights.sbomify.com/GSD-2022-1007441/): regulator: qcom_rpm: Fix circular deferral regression (not scored)
- [GSD-2022-1007440](https://insights.sbomify.com/GSD-2022-1007440/): RISC-V: Make port I/O string accessors actually work (not scored)
- [GSD-2022-1007439](https://insights.sbomify.com/GSD-2022-1007439/): xen/gntdev: Prevent leaking grants (not scored)
- [GSD-2022-1007438](https://insights.sbomify.com/GSD-2022-1007438/): UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (not scored)
- [GSD-2022-1007437](https://insights.sbomify.com/GSD-2022-1007437/): btrfs: fix race between quota enable and quota rescan ioctl (not scored)
- [GSD-2022-1007436](https://insights.sbomify.com/GSD-2022-1007436/): fbdev: smscufx: Fix use-after-free in ufx_ops_open() (not scored)
- [GSD-2022-1007435](https://insights.sbomify.com/GSD-2022-1007435/): f2fs: fix to do sanity check on destination blkaddr during recovery (not scored)
- [GSD-2022-1007434](https://insights.sbomify.com/GSD-2022-1007434/): f2fs: fix to do sanity check on summary info (not scored)
- [GSD-2022-1007433](https://insights.sbomify.com/GSD-2022-1007433/): ext4: avoid crash when inline data creation follows DIO write (not scored)
- [GSD-2022-1007432](https://insights.sbomify.com/GSD-2022-1007432/): ext4: fix null-ptr-deref in ext4_write_info (not scored)
- [GSD-2022-1007431](https://insights.sbomify.com/GSD-2022-1007431/): sh: machvec: Use char[] for section boundaries (not scored)
- [GSD-2022-1007430](https://insights.sbomify.com/GSD-2022-1007430/): drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (not scored)
- [GSD-2022-1007429](https://insights.sbomify.com/GSD-2022-1007429/): nfsd: Fix a memory leak in an error handling path (not scored)
- [GSD-2022-1007428](https://insights.sbomify.com/GSD-2022-1007428/): wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (not scored)
- [GSD-2022-1007427](https://insights.sbomify.com/GSD-2022-1007427/): vhost/vsock: Use kvmalloc/kvfree for larger packets. (not scored)
- [GSD-2022-1007426](https://insights.sbomify.com/GSD-2022-1007426/): sctp: handle the error returned from sctp_auth_asoc_init_active_key (not scored)
- [GSD-2022-1007425](https://insights.sbomify.com/GSD-2022-1007425/): mISDN: fix use-after-free bugs in l1oip timer handlers (not scored)
- [GSD-2022-1007424](https://insights.sbomify.com/GSD-2022-1007424/): net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (not scored)
- [GSD-2022-1007423](https://insights.sbomify.com/GSD-2022-1007423/): net/ieee802154: reject zero-sized raw_sendmsg() (not scored)
- [GSD-2022-1007422](https://insights.sbomify.com/GSD-2022-1007422/): bnx2x: fix potential memory leak in bnx2x_tpa_stop() (not scored)
- [GSD-2022-1007421](https://insights.sbomify.com/GSD-2022-1007421/): net: mvpp2: fix mvpp2 debugfs leak (not scored)
- [GSD-2022-1007420](https://insights.sbomify.com/GSD-2022-1007420/): drm/mipi-dsi: Detach devices when removing the host (not scored)
- [GSD-2022-1007419](https://insights.sbomify.com/GSD-2022-1007419/): platform/chrome: fix memory corruption in ioctl (not scored)
- [GSD-2022-1007418](https://insights.sbomify.com/GSD-2022-1007418/): drm/bridge: megachips: Fix a null pointer dereference bug (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/92/