# Vulnerabilities published in 2022


- [GSD-2022-1007317](https://insights.sbomify.com/GSD-2022-1007317/): xen/gntdev: Accommodate VMA splitting (not scored)
- [GSD-2022-1007316](https://insights.sbomify.com/GSD-2022-1007316/): drm/virtio: Check whether transferred 2D BO is shmem (not scored)
- [GSD-2022-1007315](https://insights.sbomify.com/GSD-2022-1007315/): fbdev: smscufx: Fix use-after-free in ufx_ops_open() (not scored)
- [GSD-2022-1007314](https://insights.sbomify.com/GSD-2022-1007314/): btrfs: fix race between quota enable and quota rescan ioctl (not scored)
- [GSD-2022-1007313](https://insights.sbomify.com/GSD-2022-1007313/): f2fs: fix to do sanity check on destination blkaddr during recovery (not scored)
- [GSD-2022-1007312](https://insights.sbomify.com/GSD-2022-1007312/): f2fs: fix to do sanity check on summary info (not scored)
- [GSD-2022-1007311](https://insights.sbomify.com/GSD-2022-1007311/): jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (not scored)
- [GSD-2022-1007310](https://insights.sbomify.com/GSD-2022-1007310/): jbd2: fix potential buffer head reference count leak (not scored)
- [GSD-2022-1007309](https://insights.sbomify.com/GSD-2022-1007309/): ext4: fix check for block being out of directory size (not scored)
- [GSD-2022-1007308](https://insights.sbomify.com/GSD-2022-1007308/): jbd2: add miss release buffer head in fc_do_one_pass() (not scored)
- [GSD-2022-1007307](https://insights.sbomify.com/GSD-2022-1007307/): ext4: avoid crash when inline data creation follows DIO write (not scored)
- [GSD-2022-1007306](https://insights.sbomify.com/GSD-2022-1007306/): ext4: fix null-ptr-deref in ext4_write_info (not scored)
- [GSD-2022-1007305](https://insights.sbomify.com/GSD-2022-1007305/): KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 (not scored)
- [GSD-2022-1007304](https://insights.sbomify.com/GSD-2022-1007304/): drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (not scored)
- [GSD-2022-1007303](https://insights.sbomify.com/GSD-2022-1007303/): ext4: fix potential memory leak in ext4_fc_record_modified_inode() (not scored)
- [GSD-2022-1007302](https://insights.sbomify.com/GSD-2022-1007302/): ext4: fix potential memory leak in ext4_fc_record_regions() (not scored)
- [GSD-2022-1007301](https://insights.sbomify.com/GSD-2022-1007301/): staging: greybus: audio_helper: remove unused and wrong debugfs usage (not scored)
- [GSD-2022-1007300](https://insights.sbomify.com/GSD-2022-1007300/): sh: machvec: Use char[] for section boundaries (not scored)
- [GSD-2022-1007299](https://insights.sbomify.com/GSD-2022-1007299/): MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() (not scored)
- [GSD-2022-1007298](https://insights.sbomify.com/GSD-2022-1007298/): nfsd: Fix a memory leak in an error handling path (not scored)
- [GSD-2022-1007297](https://insights.sbomify.com/GSD-2022-1007297/): wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (not scored)
- [GSD-2022-1007296](https://insights.sbomify.com/GSD-2022-1007296/): selftests/xsk: Avoid use-after-free on ctx (not scored)
- [GSD-2022-1007295](https://insights.sbomify.com/GSD-2022-1007295/): Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (not scored)
- [GSD-2022-1007294](https://insights.sbomify.com/GSD-2022-1007294/): mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv (not scored)
- [GSD-2022-1007293](https://insights.sbomify.com/GSD-2022-1007293/): vhost/vsock: Use kvmalloc/kvfree for larger packets. (not scored)
- [GSD-2022-1007292](https://insights.sbomify.com/GSD-2022-1007292/): sctp: handle the error returned from sctp_auth_asoc_init_active_key (not scored)
- [GSD-2022-1007291](https://insights.sbomify.com/GSD-2022-1007291/): mISDN: fix use-after-free bugs in l1oip timer handlers (not scored)
- [GSD-2022-1007290](https://insights.sbomify.com/GSD-2022-1007290/): net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (not scored)
- [GSD-2022-1007289](https://insights.sbomify.com/GSD-2022-1007289/): bnx2x: fix potential memory leak in bnx2x_tpa_stop() (not scored)
- [GSD-2022-1007288](https://insights.sbomify.com/GSD-2022-1007288/): net: mvpp2: fix mvpp2 debugfs leak (not scored)
- [GSD-2022-1007287](https://insights.sbomify.com/GSD-2022-1007287/): net/ieee802154: reject zero-sized raw_sendmsg() (not scored)
- [GSD-2022-1007286](https://insights.sbomify.com/GSD-2022-1007286/): drm/mipi-dsi: Detach devices when removing the host (not scored)
- [GSD-2022-1007285](https://insights.sbomify.com/GSD-2022-1007285/): platform/chrome: fix memory corruption in ioctl (not scored)
- [GSD-2022-1007284](https://insights.sbomify.com/GSD-2022-1007284/): drm/bridge: megachips: Fix a null pointer dereference bug (not scored)
- [GSD-2022-1007283](https://insights.sbomify.com/GSD-2022-1007283/): drm/omap: dss: Fix refcount leak bugs (not scored)
- [GSD-2022-1007282](https://insights.sbomify.com/GSD-2022-1007282/): drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (not scored)
- [GSD-2022-1007281](https://insights.sbomify.com/GSD-2022-1007281/): ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (not scored)
- [GSD-2022-1007280](https://insights.sbomify.com/GSD-2022-1007280/): memory: of: Fix refcount leak bug in of_get_ddr_timings() (not scored)
- [GSD-2022-1007279](https://insights.sbomify.com/GSD-2022-1007279/): memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (not scored)
- [GSD-2022-1007278](https://insights.sbomify.com/GSD-2022-1007278/): soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (not scored)
- [GSD-2022-1007277](https://insights.sbomify.com/GSD-2022-1007277/): memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (not scored)
- [GSD-2022-1007276](https://insights.sbomify.com/GSD-2022-1007276/): arm64: ftrace: fix module PLTs with mcount (not scored)
- [GSD-2022-1007275](https://insights.sbomify.com/GSD-2022-1007275/): clk: tegra: Fix refcount leak in tegra210_clock_init (not scored)
- [GSD-2022-1007274](https://insights.sbomify.com/GSD-2022-1007274/): clk: tegra: Fix refcount leak in tegra114_clock_init (not scored)
- [GSD-2022-1007273](https://insights.sbomify.com/GSD-2022-1007273/): clk: tegra20: Fix refcount leak in tegra20_clock_init (not scored)
- [GSD-2022-1007272](https://insights.sbomify.com/GSD-2022-1007272/): HSI: omap_ssi: Fix refcount leak in ssi_probe (not scored)
- [GSD-2022-1007271](https://insights.sbomify.com/GSD-2022-1007271/): media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (not scored)
- [GSD-2022-1007270](https://insights.sbomify.com/GSD-2022-1007270/): RDMA/rxe: Fix "kernel NULL pointer dereference" error (not scored)
- [GSD-2022-1007269](https://insights.sbomify.com/GSD-2022-1007269/): misc: ocxl: fix possible refcount leak in afu_ioctl() (not scored)
- [GSD-2022-1007268](https://insights.sbomify.com/GSD-2022-1007268/): dmaengine: hisilicon: Add multi-thread support for a DMA channel (not scored)
- [GSD-2022-1007267](https://insights.sbomify.com/GSD-2022-1007267/): fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (not scored)
- [GSD-2022-1007266](https://insights.sbomify.com/GSD-2022-1007266/): md: Replace snprintf with scnprintf (not scored)
- [GSD-2022-1007265](https://insights.sbomify.com/GSD-2022-1007265/): usb: gadget: function: fix dangling pnp_string in f_printer.c (not scored)
- [GSD-2022-1007264](https://insights.sbomify.com/GSD-2022-1007264/): drivers: serial: jsm: fix some leaks in probe (not scored)
- [GSD-2022-1007263](https://insights.sbomify.com/GSD-2022-1007263/): tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (not scored)
- [GSD-2022-1007262](https://insights.sbomify.com/GSD-2022-1007262/): staging: vt6655: fix some erroneous memory clean-up loops (not scored)
- [GSD-2022-1007261](https://insights.sbomify.com/GSD-2022-1007261/): firmware: google: Test spinlock on panic path to avoid lockups (not scored)
- [GSD-2022-1007260](https://insights.sbomify.com/GSD-2022-1007260/): scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (not scored)
- [GSD-2022-1007259](https://insights.sbomify.com/GSD-2022-1007259/): scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (not scored)
- [GSD-2022-1007258](https://insights.sbomify.com/GSD-2022-1007258/): clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (not scored)
- [GSD-2022-1007257](https://insights.sbomify.com/GSD-2022-1007257/): crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (not scored)
- [GSD-2022-1007256](https://insights.sbomify.com/GSD-2022-1007256/): iommu/omap: Fix buffer overflow in debugfs (not scored)
- [GSD-2022-1007255](https://insights.sbomify.com/GSD-2022-1007255/): crypto: akcipher - default implementation for setting a private key (not scored)
- [GSD-2022-1007254](https://insights.sbomify.com/GSD-2022-1007254/): crypto: marvell/octeontx - prevent integer overflows (not scored)
- [GSD-2022-1007253](https://insights.sbomify.com/GSD-2022-1007253/): crypto: qat - fix DMA transfer direction (not scored)
- [GSD-2022-1007252](https://insights.sbomify.com/GSD-2022-1007252/): crypto: cavium - prevent integer overflow loading firmware (not scored)
- [GSD-2022-1007251](https://insights.sbomify.com/GSD-2022-1007251/): ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (not scored)
- [GSD-2022-1007250](https://insights.sbomify.com/GSD-2022-1007250/): powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (not scored)
- [GSD-2022-1007249](https://insights.sbomify.com/GSD-2022-1007249/): thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (not scored)
- [GSD-2022-1007248](https://insights.sbomify.com/GSD-2022-1007248/): NFSD: fix use-after-free on source server when doing inter-server copy (not scored)
- [GSD-2022-1007247](https://insights.sbomify.com/GSD-2022-1007247/): x86/entry: Work around Clang __bdos() bug (not scored)
- [GSD-2022-1007246](https://insights.sbomify.com/GSD-2022-1007246/): wifi: brcmfmac: fix invalid address access when enabling SCAN log level (not scored)
- [GSD-2022-1007245](https://insights.sbomify.com/GSD-2022-1007245/): tcp: annotate data-race around tcp_md5sig_pool_populated (not scored)
- [GSD-2022-1007244](https://insights.sbomify.com/GSD-2022-1007244/): wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (not scored)
- [GSD-2022-1007243](https://insights.sbomify.com/GSD-2022-1007243/): xfrm: Update ipcomp_scratches with NULL when freed (not scored)
- [GSD-2022-1007242](https://insights.sbomify.com/GSD-2022-1007242/): regulator: core: Prevent integer underflow (not scored)
- [GSD-2022-1007241](https://insights.sbomify.com/GSD-2022-1007241/): wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (not scored)
- [GSD-2022-1007240](https://insights.sbomify.com/GSD-2022-1007240/): Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (not scored)
- [GSD-2022-1007239](https://insights.sbomify.com/GSD-2022-1007239/): Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (not scored)
- [GSD-2022-1007238](https://insights.sbomify.com/GSD-2022-1007238/): net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (not scored)
- [GSD-2022-1007237](https://insights.sbomify.com/GSD-2022-1007237/): Bluetooth: L2CAP: Fix user-after-free (not scored)
- [GSD-2022-1007236](https://insights.sbomify.com/GSD-2022-1007236/): drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (not scored)
- [GSD-2022-1007235](https://insights.sbomify.com/GSD-2022-1007235/): drm: Use size_t type for len variable in drm_copy_field() (not scored)
- [GSD-2022-1007234](https://insights.sbomify.com/GSD-2022-1007234/): drm: Prevent drm_copy_field() to attempt copying a NULL pointer (not scored)
- [GSD-2022-1007233](https://insights.sbomify.com/GSD-2022-1007233/): gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (not scored)
- [GSD-2022-1007232](https://insights.sbomify.com/GSD-2022-1007232/): drm/amd/display: fix overflow on MIN_I64 definition (not scored)
- [GSD-2022-1007231](https://insights.sbomify.com/GSD-2022-1007231/): udmabuf: Set ubuf->sg = NULL if the creation of sg table fails (not scored)
- [GSD-2022-1007230](https://insights.sbomify.com/GSD-2022-1007230/): drm/meson: explicitly remove aggregate driver at module unload time (not scored)
- [GSD-2022-1007229](https://insights.sbomify.com/GSD-2022-1007229/): drm/dp: Don't rewrite link config when setting phy test pattern (not scored)
- [GSD-2022-1007228](https://insights.sbomify.com/GSD-2022-1007228/): drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (not scored)
- [GSD-2022-1007227](https://insights.sbomify.com/GSD-2022-1007227/): kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (not scored)
- [GSD-2022-1007226](https://insights.sbomify.com/GSD-2022-1007226/): clk: zynqmp: Fix stack-out-of-bounds in strncpy` (not scored)
- [GSD-2022-1007225](https://insights.sbomify.com/GSD-2022-1007225/): media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (not scored)
- [GSD-2022-1007224](https://insights.sbomify.com/GSD-2022-1007224/): clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (not scored)
- [GSD-2022-1007223](https://insights.sbomify.com/GSD-2022-1007223/): nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (not scored)
- [GSD-2022-1007222](https://insights.sbomify.com/GSD-2022-1007222/): power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (not scored)
- [GSD-2022-1007221](https://insights.sbomify.com/GSD-2022-1007221/): staging: vt6655: fix potential memory leak (not scored)
- [GSD-2022-1007220](https://insights.sbomify.com/GSD-2022-1007220/): blk-throttle: prevent overflow while calculating wait time (not scored)
- [GSD-2022-1007219](https://insights.sbomify.com/GSD-2022-1007219/): ata: libahci_platform: Sanity check the DT child nodes number (not scored)
- [GSD-2022-1007218](https://insights.sbomify.com/GSD-2022-1007218/): soundwire: cadence: Don't overwrite msg->buf during write commands (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/94/