# Vulnerabilities published in 2022


- [GSD-2022-1007417](https://insights.sbomify.com/GSD-2022-1007417/): drm/omap: dss: Fix refcount leak bugs (not scored)
- [GSD-2022-1007416](https://insights.sbomify.com/GSD-2022-1007416/): drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (not scored)
- [GSD-2022-1007415](https://insights.sbomify.com/GSD-2022-1007415/): memory: of: Fix refcount leak bug in of_get_ddr_timings() (not scored)
- [GSD-2022-1007414](https://insights.sbomify.com/GSD-2022-1007414/): soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (not scored)
- [GSD-2022-1007413](https://insights.sbomify.com/GSD-2022-1007413/): memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (not scored)
- [GSD-2022-1007412](https://insights.sbomify.com/GSD-2022-1007412/): clk: tegra: Fix refcount leak in tegra210_clock_init (not scored)
- [GSD-2022-1007411](https://insights.sbomify.com/GSD-2022-1007411/): clk: tegra: Fix refcount leak in tegra114_clock_init (not scored)
- [GSD-2022-1007410](https://insights.sbomify.com/GSD-2022-1007410/): clk: tegra20: Fix refcount leak in tegra20_clock_init (not scored)
- [GSD-2022-1007409](https://insights.sbomify.com/GSD-2022-1007409/): HSI: omap_ssi: Fix refcount leak in ssi_probe (not scored)
- [GSD-2022-1007408](https://insights.sbomify.com/GSD-2022-1007408/): misc: ocxl: fix possible refcount leak in afu_ioctl() (not scored)
- [GSD-2022-1007407](https://insights.sbomify.com/GSD-2022-1007407/): media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (not scored)
- [GSD-2022-1007406](https://insights.sbomify.com/GSD-2022-1007406/): RDMA/rxe: Fix "kernel NULL pointer dereference" error (not scored)
- [GSD-2022-1007405](https://insights.sbomify.com/GSD-2022-1007405/): usb: gadget: function: fix dangling pnp_string in f_printer.c (not scored)
- [GSD-2022-1007404](https://insights.sbomify.com/GSD-2022-1007404/): md: Replace snprintf with scnprintf (not scored)
- [GSD-2022-1007403](https://insights.sbomify.com/GSD-2022-1007403/): scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (not scored)
- [GSD-2022-1007402](https://insights.sbomify.com/GSD-2022-1007402/): firmware: google: Test spinlock on panic path to avoid lockups (not scored)
- [GSD-2022-1007401](https://insights.sbomify.com/GSD-2022-1007401/): tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (not scored)
- [GSD-2022-1007400](https://insights.sbomify.com/GSD-2022-1007400/): staging: vt6655: fix some erroneous memory clean-up loops (not scored)
- [GSD-2022-1007399](https://insights.sbomify.com/GSD-2022-1007399/): drivers: serial: jsm: fix some leaks in probe (not scored)
- [GSD-2022-1007398](https://insights.sbomify.com/GSD-2022-1007398/): clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (not scored)
- [GSD-2022-1007397](https://insights.sbomify.com/GSD-2022-1007397/): iommu/omap: Fix buffer overflow in debugfs (not scored)
- [GSD-2022-1007396](https://insights.sbomify.com/GSD-2022-1007396/): crypto: akcipher - default implementation for setting a private key (not scored)
- [GSD-2022-1007395](https://insights.sbomify.com/GSD-2022-1007395/): crypto: cavium - prevent integer overflow loading firmware (not scored)
- [GSD-2022-1007394](https://insights.sbomify.com/GSD-2022-1007394/): powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (not scored)
- [GSD-2022-1007393](https://insights.sbomify.com/GSD-2022-1007393/): thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (not scored)
- [GSD-2022-1007392](https://insights.sbomify.com/GSD-2022-1007392/): wifi: brcmfmac: fix invalid address access when enabling SCAN log level (not scored)
- [GSD-2022-1007391](https://insights.sbomify.com/GSD-2022-1007391/): wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (not scored)
- [GSD-2022-1007390](https://insights.sbomify.com/GSD-2022-1007390/): tcp: annotate data-race around tcp_md5sig_pool_populated (not scored)
- [GSD-2022-1007389](https://insights.sbomify.com/GSD-2022-1007389/): wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (not scored)
- [GSD-2022-1007388](https://insights.sbomify.com/GSD-2022-1007388/): xfrm: Update ipcomp_scratches with NULL when freed (not scored)
- [GSD-2022-1007387](https://insights.sbomify.com/GSD-2022-1007387/): Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (not scored)
- [GSD-2022-1007386](https://insights.sbomify.com/GSD-2022-1007386/): Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (not scored)
- [GSD-2022-1007385](https://insights.sbomify.com/GSD-2022-1007385/): net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (not scored)
- [GSD-2022-1007384](https://insights.sbomify.com/GSD-2022-1007384/): Bluetooth: L2CAP: Fix user-after-free (not scored)
- [GSD-2022-1007383](https://insights.sbomify.com/GSD-2022-1007383/): drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (not scored)
- [GSD-2022-1007382](https://insights.sbomify.com/GSD-2022-1007382/): drm: Use size_t type for len variable in drm_copy_field() (not scored)
- [GSD-2022-1007381](https://insights.sbomify.com/GSD-2022-1007381/): drm: Prevent drm_copy_field() to attempt copying a NULL pointer (not scored)
- [GSD-2022-1007380](https://insights.sbomify.com/GSD-2022-1007380/): drm/amd/display: fix overflow on MIN_I64 definition (not scored)
- [GSD-2022-1007379](https://insights.sbomify.com/GSD-2022-1007379/): drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (not scored)
- [GSD-2022-1007378](https://insights.sbomify.com/GSD-2022-1007378/): clk: zynqmp: Fix stack-out-of-bounds in strncpy` (not scored)
- [GSD-2022-1007377](https://insights.sbomify.com/GSD-2022-1007377/): media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (not scored)
- [GSD-2022-1007376](https://insights.sbomify.com/GSD-2022-1007376/): clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (not scored)
- [GSD-2022-1007375](https://insights.sbomify.com/GSD-2022-1007375/): power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (not scored)
- [GSD-2022-1007374](https://insights.sbomify.com/GSD-2022-1007374/): nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (not scored)
- [GSD-2022-1007373](https://insights.sbomify.com/GSD-2022-1007373/): staging: vt6655: fix potential memory leak (not scored)
- [GSD-2022-1007372](https://insights.sbomify.com/GSD-2022-1007372/): ata: libahci_platform: Sanity check the DT child nodes number (not scored)
- [GSD-2022-1007371](https://insights.sbomify.com/GSD-2022-1007371/): HID: roccat: Fix use-after-free in roccat_read() (not scored)
- [GSD-2022-1007370](https://insights.sbomify.com/GSD-2022-1007370/): usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (not scored)
- [GSD-2022-1007369](https://insights.sbomify.com/GSD-2022-1007369/): usb: musb: Fix musb_gadget.c rxstate overflow bug (not scored)
- [GSD-2022-1007368](https://insights.sbomify.com/GSD-2022-1007368/): net/ieee802154: don't warn zero-sized raw_sendmsg() (not scored)
- [GSD-2022-1007367](https://insights.sbomify.com/GSD-2022-1007367/): staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (not scored)
- [GSD-2022-1007366](https://insights.sbomify.com/GSD-2022-1007366/): nvmet-tcp: add bounds check on Transfer Tag (not scored)
- [GSD-2022-1007365](https://insights.sbomify.com/GSD-2022-1007365/): usb: idmouse: fix an uninit-value in idmouse_open (not scored)
- [GSD-2022-1007364](https://insights.sbomify.com/GSD-2022-1007364/): ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (not scored)
- [GSD-2022-1007363](https://insights.sbomify.com/GSD-2022-1007363/): mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (not scored)
- [GSD-2022-1007362](https://insights.sbomify.com/GSD-2022-1007362/): KVM: arm64: vgic: Fix exit condition in scan_its_table() (not scored)
- [GSD-2022-1007361](https://insights.sbomify.com/GSD-2022-1007361/): tipc: fix an information leak in tipc_topsrv_kern_subscr (not scored)
- [GSD-2022-1007360](https://insights.sbomify.com/GSD-2022-1007360/): tipc: Fix recognition of trial period (not scored)
- [GSD-2022-1007359](https://insights.sbomify.com/GSD-2022-1007359/): net: sched: cake: fix null pointer access issue when cake_init() fails (not scored)
- [GSD-2022-1007358](https://insights.sbomify.com/GSD-2022-1007358/): net: hns: fix possible memory leak in hnae_ae_register() (not scored)
- [GSD-2022-1007357](https://insights.sbomify.com/GSD-2022-1007357/): iommu/vt-d: Clean up si_domain in the init_dmars() error path (not scored)
- [GSD-2022-1007356](https://insights.sbomify.com/GSD-2022-1007356/): mm: /proc/pid/smaps_rollup: fix no vma's null-deref (not scored)
- [GSD-2022-1007355](https://insights.sbomify.com/GSD-2022-1007355/): xhci: Remove device endpoints from bandwidth list when freeing the device (not scored)
- [GSD-2022-1007354](https://insights.sbomify.com/GSD-2022-1007354/): drm/msm/hdmi: fix memory corruption with too many bridges (not scored)
- [GSD-2022-1007353](https://insights.sbomify.com/GSD-2022-1007353/): drm/msm/dsi: fix memory corruption with too many bridges (not scored)
- [GSD-2022-1007352](https://insights.sbomify.com/GSD-2022-1007352/): mmc: core: Fix kernel panic when remove non-standard SDIO card (not scored)
- [GSD-2022-1007351](https://insights.sbomify.com/GSD-2022-1007351/): fbdev: smscufx: Fix several use-after-free bugs (not scored)
- [GSD-2022-1007350](https://insights.sbomify.com/GSD-2022-1007350/): ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (not scored)
- [GSD-2022-1007349](https://insights.sbomify.com/GSD-2022-1007349/): net: netsec: fix error handling in netsec_register_mdio() (not scored)
- [GSD-2022-1007348](https://insights.sbomify.com/GSD-2022-1007348/): tipc: fix a null-ptr-deref in tipc_topsrv_accept (not scored)
- [GSD-2022-1007347](https://insights.sbomify.com/GSD-2022-1007347/): kernfs: fix use-after-free in __kernfs_remove (not scored)
- [GSD-2022-1007346](https://insights.sbomify.com/GSD-2022-1007346/): x86/unwind/orc: Fix unreliable stack dump with gcov (not scored)
- [GSD-2022-1007345](https://insights.sbomify.com/GSD-2022-1007345/): kcm: annotate data-races around kcm->rx_psock (not scored)
- [GSD-2022-1007344](https://insights.sbomify.com/GSD-2022-1007344/): kcm: annotate data-races around kcm->rx_wait (not scored)
- [GSD-2022-1007343](https://insights.sbomify.com/GSD-2022-1007343/): net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (not scored)
- [GSD-2022-1007342](https://insights.sbomify.com/GSD-2022-1007342/): ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (not scored)
- [GSD-2022-1007341](https://insights.sbomify.com/GSD-2022-1007341/): openvswitch: switch from WARN to pr_warn (not scored)
- [GSD-2022-1007340](https://insights.sbomify.com/GSD-2022-1007340/): net: ehea: fix possible memory leak in ehea_register_port() (not scored)
- [GSD-2022-1007339](https://insights.sbomify.com/GSD-2022-1007339/): net/mlx5: Fix possible use-after-free in async command interface (not scored)
- [GSD-2022-1007338](https://insights.sbomify.com/GSD-2022-1007338/): usb: mon: make mmapped memory read only (not scored)
- [GSD-2022-1007337](https://insights.sbomify.com/GSD-2022-1007337/): fs: fix UAF/GPF bug in nilfs_mdt_destroy (not scored)
- [GSD-2022-1007336](https://insights.sbomify.com/GSD-2022-1007336/): nilfs2: fix leak of nilfs_root in case of writer thread creation failure (not scored)
- [GSD-2022-1007335](https://insights.sbomify.com/GSD-2022-1007335/): nilfs2: fix use-after-free bug of struct nilfs_root (not scored)
- [GSD-2022-1007334](https://insights.sbomify.com/GSD-2022-1007334/): nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (not scored)
- [GSD-2022-1007333](https://insights.sbomify.com/GSD-2022-1007333/): wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (not scored)
- [GSD-2022-1007332](https://insights.sbomify.com/GSD-2022-1007332/): wifi: cfg80211/mac80211: reject bad MBSSID elements (not scored)
- [GSD-2022-1007331](https://insights.sbomify.com/GSD-2022-1007331/): nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (not scored)
- [GSD-2022-1007330](https://insights.sbomify.com/GSD-2022-1007330/): scsi: stex: Properly zero out the passthrough command structure (not scored)
- [GSD-2022-1007329](https://insights.sbomify.com/GSD-2022-1007329/): wifi: mac80211: fix MBSSID parsing use-after-free (not scored)
- [GSD-2022-1007328](https://insights.sbomify.com/GSD-2022-1007328/): wifi: cfg80211: fix BSS refcounting bugs (not scored)
- [GSD-2022-1007327](https://insights.sbomify.com/GSD-2022-1007327/): wifi: mac80211: fix crash in beacon protection for P2P-device (not scored)
- [GSD-2022-1007326](https://insights.sbomify.com/GSD-2022-1007326/): wifi: cfg80211: avoid nontransmitted BSS list corruption (not scored)
- [GSD-2022-1007325](https://insights.sbomify.com/GSD-2022-1007325/): misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (not scored)
- [GSD-2022-1007324](https://insights.sbomify.com/GSD-2022-1007324/): io_uring/af_unix: defer registered files gc to io_uring release (not scored)
- [GSD-2022-1007323](https://insights.sbomify.com/GSD-2022-1007323/): cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (not scored)
- [GSD-2022-1007322](https://insights.sbomify.com/GSD-2022-1007322/): ALSA: usb-audio: Fix potential memory leaks (not scored)
- [GSD-2022-1007321](https://insights.sbomify.com/GSD-2022-1007321/): regulator: qcom_rpm: Fix circular deferral regression (not scored)
- [GSD-2022-1007320](https://insights.sbomify.com/GSD-2022-1007320/): RISC-V: Make port I/O string accessors actually work (not scored)
- [GSD-2022-1007319](https://insights.sbomify.com/GSD-2022-1007319/): UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (not scored)
- [GSD-2022-1007318](https://insights.sbomify.com/GSD-2022-1007318/): xen/gntdev: Prevent leaking grants (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/93/