# Vulnerabilities published in 2022


- [GSD-2022-1007017](https://insights.sbomify.com/GSD-2022-1007017/): clk: zynqmp: Fix stack-out-of-bounds in strncpy` (not scored)
- [GSD-2022-1007016](https://insights.sbomify.com/GSD-2022-1007016/): media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (not scored)
- [GSD-2022-1007015](https://insights.sbomify.com/GSD-2022-1007015/): clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (not scored)
- [GSD-2022-1007014](https://insights.sbomify.com/GSD-2022-1007014/): dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (not scored)
- [GSD-2022-1007013](https://insights.sbomify.com/GSD-2022-1007013/): power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (not scored)
- [GSD-2022-1007012](https://insights.sbomify.com/GSD-2022-1007012/): nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (not scored)
- [GSD-2022-1007011](https://insights.sbomify.com/GSD-2022-1007011/): staging: vt6655: fix potential memory leak (not scored)
- [GSD-2022-1007010](https://insights.sbomify.com/GSD-2022-1007010/): blk-throttle: prevent overflow while calculating wait time (not scored)
- [GSD-2022-1007009](https://insights.sbomify.com/GSD-2022-1007009/): ata: libahci_platform: Sanity check the DT child nodes number (not scored)
- [GSD-2022-1007008](https://insights.sbomify.com/GSD-2022-1007008/): soundwire: cadence: Don't overwrite msg->buf during write commands (not scored)
- [GSD-2022-1007007](https://insights.sbomify.com/GSD-2022-1007007/): HID: roccat: Fix use-after-free in roccat_read() (not scored)
- [GSD-2022-1007006](https://insights.sbomify.com/GSD-2022-1007006/): usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (not scored)
- [GSD-2022-1007005](https://insights.sbomify.com/GSD-2022-1007005/): usb: musb: Fix musb_gadget.c rxstate overflow bug (not scored)
- [GSD-2022-1007004](https://insights.sbomify.com/GSD-2022-1007004/): staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (not scored)
- [GSD-2022-1007003](https://insights.sbomify.com/GSD-2022-1007003/): staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (not scored)
- [GSD-2022-1007002](https://insights.sbomify.com/GSD-2022-1007002/): ext2: Use kvmalloc() for group descriptor array (not scored)
- [GSD-2022-1007001](https://insights.sbomify.com/GSD-2022-1007001/): nvmet-tcp: add bounds check on Transfer Tag (not scored)
- [GSD-2022-1007000](https://insights.sbomify.com/GSD-2022-1007000/): usb: idmouse: fix an uninit-value in idmouse_open (not scored)
- [GSD-2022-1006999](https://insights.sbomify.com/GSD-2022-1006999/): mm: hugetlb: fix UAF in hugetlb_handle_userfault (not scored)
- [GSD-2022-1006998](https://insights.sbomify.com/GSD-2022-1006998/): ALSA: usb-audio: Fix last interface check for registration (not scored)
- [GSD-2022-1006997](https://insights.sbomify.com/GSD-2022-1006997/): net/ieee802154: don't warn zero-sized raw_sendmsg() (not scored)
- [GSD-2022-1006996](https://insights.sbomify.com/GSD-2022-1006996/): io-wq: Fix memory leak in worker creation (not scored)
- [GSD-2022-1006995](https://insights.sbomify.com/GSD-2022-1006995/): selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (not scored)
- [GSD-2022-1006994](https://insights.sbomify.com/GSD-2022-1006994/): cpufreq: qcom: fix writes in read-only memory region (not scored)
- [GSD-2022-1006993](https://insights.sbomify.com/GSD-2022-1006993/): cpufreq: qcom: fix memory leak in error path (not scored)
- [GSD-2022-1006992](https://insights.sbomify.com/GSD-2022-1006992/): ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (not scored)
- [GSD-2022-1006991](https://insights.sbomify.com/GSD-2022-1006991/): KVM: arm64: vgic: Fix exit condition in scan_its_table() (not scored)
- [GSD-2022-1006990](https://insights.sbomify.com/GSD-2022-1006990/): mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (not scored)
- [GSD-2022-1006989](https://insights.sbomify.com/GSD-2022-1006989/): media: ipu3-imgu: Fix NULL pointer dereference in active selection access (not scored)
- [GSD-2022-1006988](https://insights.sbomify.com/GSD-2022-1006988/): tipc: Fix recognition of trial period (not scored)
- [GSD-2022-1006987](https://insights.sbomify.com/GSD-2022-1006987/): i40e: Fix DMA mappings leak (not scored)
- [GSD-2022-1006986](https://insights.sbomify.com/GSD-2022-1006986/): tipc: fix an information leak in tipc_topsrv_kern_subscr (not scored)
- [GSD-2022-1006985](https://insights.sbomify.com/GSD-2022-1006985/): scsi: lpfc: Fix memory leak in lpfc_create_port() (not scored)
- [GSD-2022-1006984](https://insights.sbomify.com/GSD-2022-1006984/): udp: Update reuse->has_conns under reuseport_lock. (not scored)
- [GSD-2022-1006983](https://insights.sbomify.com/GSD-2022-1006983/): cifs: Fix xid leak in cifs_create() (not scored)
- [GSD-2022-1006982](https://insights.sbomify.com/GSD-2022-1006982/): cifs: Fix xid leak in cifs_copy_file_range() (not scored)
- [GSD-2022-1006981](https://insights.sbomify.com/GSD-2022-1006981/): cifs: Fix xid leak in cifs_flock() (not scored)
- [GSD-2022-1006980](https://insights.sbomify.com/GSD-2022-1006980/): cifs: Fix xid leak in cifs_ses_add_channel() (not scored)
- [GSD-2022-1006979](https://insights.sbomify.com/GSD-2022-1006979/): nvme-hwmon: kmalloc the NVME SMART log buffer (not scored)
- [GSD-2022-1006978](https://insights.sbomify.com/GSD-2022-1006978/): net: hsr: avoid possible NULL deref in skb_clone() (not scored)
- [GSD-2022-1006977](https://insights.sbomify.com/GSD-2022-1006977/): net: sched: cake: fix null pointer access issue when cake_init() fails (not scored)
- [GSD-2022-1006976](https://insights.sbomify.com/GSD-2022-1006976/): net: sched: sfb: fix null pointer access issue when sfb_init() fails (not scored)
- [GSD-2022-1006975](https://insights.sbomify.com/GSD-2022-1006975/): wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (not scored)
- [GSD-2022-1006974](https://insights.sbomify.com/GSD-2022-1006974/): net: sched: fix race condition in qdisc_graft() (not scored)
- [GSD-2022-1006973](https://insights.sbomify.com/GSD-2022-1006973/): net: hns: fix possible memory leak in hnae_ae_register() (not scored)
- [GSD-2022-1006972](https://insights.sbomify.com/GSD-2022-1006972/): iommu/vt-d: Clean up si_domain in the init_dmars() error path (not scored)
- [GSD-2022-1006971](https://insights.sbomify.com/GSD-2022-1006971/): mm: /proc/pid/smaps_rollup: fix no vma's null-deref (not scored)
- [GSD-2022-1006970](https://insights.sbomify.com/GSD-2022-1006970/): usb: gadget: uvc: fix sg handling during video encode (not scored)
- [GSD-2022-1006969](https://insights.sbomify.com/GSD-2022-1006969/): iio: temperature: ltc2983: allocate iio channels once (not scored)
- [GSD-2022-1006968](https://insights.sbomify.com/GSD-2022-1006968/): fs/binfmt_elf: Fix memory leak in load_elf_binary() (not scored)
- [GSD-2022-1006967](https://insights.sbomify.com/GSD-2022-1006967/): xhci: Remove device endpoints from bandwidth list when freeing the device (not scored)
- [GSD-2022-1006966](https://insights.sbomify.com/GSD-2022-1006966/): fbdev: smscufx: Fix several use-after-free bugs (not scored)
- [GSD-2022-1006965](https://insights.sbomify.com/GSD-2022-1006965/): drm/msm/dsi: fix memory corruption with too many bridges (not scored)
- [GSD-2022-1006964](https://insights.sbomify.com/GSD-2022-1006964/): drm/msm/hdmi: fix memory corruption with too many bridges (not scored)
- [GSD-2022-1006963](https://insights.sbomify.com/GSD-2022-1006963/): coresight: cti: Fix hang in cti_disable_hw() (not scored)
- [GSD-2022-1006962](https://insights.sbomify.com/GSD-2022-1006962/): mmc: core: Fix kernel panic when remove non-standard SDIO card (not scored)
- [GSD-2022-1006961](https://insights.sbomify.com/GSD-2022-1006961/): kernfs: fix use-after-free in __kernfs_remove (not scored)
- [GSD-2022-1006960](https://insights.sbomify.com/GSD-2022-1006960/): s390/cio: fix out-of-bounds access on cio_ignore free (not scored)
- [GSD-2022-1006959](https://insights.sbomify.com/GSD-2022-1006959/): ARC: mm: fix leakage of memory allocated for PTE (not scored)
- [GSD-2022-1006958](https://insights.sbomify.com/GSD-2022-1006958/): ethtool: eeprom: fix null-deref on genl_info in dump (not scored)
- [GSD-2022-1006957](https://insights.sbomify.com/GSD-2022-1006957/): media: atomisp: prevent integer overflow in sh_css_set_black_frame() (not scored)
- [GSD-2022-1006956](https://insights.sbomify.com/GSD-2022-1006956/): perf: Fix missing SIGTRAPs (not scored)
- [GSD-2022-1006955](https://insights.sbomify.com/GSD-2022-1006955/): tipc: fix a null-ptr-deref in tipc_topsrv_accept (not scored)
- [GSD-2022-1006954](https://insights.sbomify.com/GSD-2022-1006954/): ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (not scored)
- [GSD-2022-1006953](https://insights.sbomify.com/GSD-2022-1006953/): net: hinic: fix memory leak when reading function table (not scored)
- [GSD-2022-1006952](https://insights.sbomify.com/GSD-2022-1006952/): net: netsec: fix error handling in netsec_register_mdio() (not scored)
- [GSD-2022-1006951](https://insights.sbomify.com/GSD-2022-1006951/): net: hinic: fix the issue of CMDQ memory leaks (not scored)
- [GSD-2022-1006950](https://insights.sbomify.com/GSD-2022-1006950/): nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (not scored)
- [GSD-2022-1006949](https://insights.sbomify.com/GSD-2022-1006949/): x86/unwind/orc: Fix unreliable stack dump with gcov (not scored)
- [GSD-2022-1006948](https://insights.sbomify.com/GSD-2022-1006948/): kcm: annotate data-races around kcm->rx_wait (not scored)
- [GSD-2022-1006947](https://insights.sbomify.com/GSD-2022-1006947/): kcm: annotate data-races around kcm->rx_psock (not scored)
- [GSD-2022-1006946](https://insights.sbomify.com/GSD-2022-1006946/): net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (not scored)
- [GSD-2022-1006945](https://insights.sbomify.com/GSD-2022-1006945/): tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (not scored)
- [GSD-2022-1006944](https://insights.sbomify.com/GSD-2022-1006944/): drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (not scored)
- [GSD-2022-1006943](https://insights.sbomify.com/GSD-2022-1006943/): ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (not scored)
- [GSD-2022-1006942](https://insights.sbomify.com/GSD-2022-1006942/): ipv6: ensure sane device mtu in tunnels (not scored)
- [GSD-2022-1006941](https://insights.sbomify.com/GSD-2022-1006941/): openvswitch: switch from WARN to pr_warn (not scored)
- [GSD-2022-1006940](https://insights.sbomify.com/GSD-2022-1006940/): net: ehea: fix possible memory leak in ehea_register_port() (not scored)
- [GSD-2022-1006939](https://insights.sbomify.com/GSD-2022-1006939/): net: broadcom: bcm4908_enet: update TX stats after actual transmission (not scored)
- [GSD-2022-1006938](https://insights.sbomify.com/GSD-2022-1006938/): net/mlx5: Fix possible use-after-free in async command interface (not scored)
- [GSD-2022-1006937](https://insights.sbomify.com/GSD-2022-1006937/): net: do not sense pfmemalloc status in skb_append_pagefrags() (not scored)
- [GSD-2022-1006936](https://insights.sbomify.com/GSD-2022-1006936/): usb: mon: make mmapped memory read only (not scored)
- [GSD-2022-1006935](https://insights.sbomify.com/GSD-2022-1006935/): Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works (not scored)
- [GSD-2022-1006934](https://insights.sbomify.com/GSD-2022-1006934/): fs: fix UAF/GPF bug in nilfs_mdt_destroy (not scored)
- [GSD-2022-1006933](https://insights.sbomify.com/GSD-2022-1006933/): nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (not scored)
- [GSD-2022-1006932](https://insights.sbomify.com/GSD-2022-1006932/): nilfs2: fix leak of nilfs_root in case of writer thread creation failure (not scored)
- [GSD-2022-1006931](https://insights.sbomify.com/GSD-2022-1006931/): wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (not scored)
- [GSD-2022-1006930](https://insights.sbomify.com/GSD-2022-1006930/): nilfs2: fix use-after-free bug of struct nilfs_root (not scored)
- [GSD-2022-1006929](https://insights.sbomify.com/GSD-2022-1006929/): nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (not scored)
- [GSD-2022-1006928](https://insights.sbomify.com/GSD-2022-1006928/): scsi: stex: Properly zero out the passthrough command structure (not scored)
- [GSD-2022-1006927](https://insights.sbomify.com/GSD-2022-1006927/): wifi: mac80211: fix MBSSID parsing use-after-free (not scored)
- [GSD-2022-1006926](https://insights.sbomify.com/GSD-2022-1006926/): wifi: cfg80211/mac80211: reject bad MBSSID elements (not scored)
- [GSD-2022-1006925](https://insights.sbomify.com/GSD-2022-1006925/): wifi: cfg80211: fix BSS refcounting bugs (not scored)
- [GSD-2022-1006924](https://insights.sbomify.com/GSD-2022-1006924/): wifi: cfg80211: avoid nontransmitted BSS list corruption (not scored)
- [GSD-2022-1006923](https://insights.sbomify.com/GSD-2022-1006923/): wifi: mac80211: fix crash in beacon protection for P2P-device (not scored)
- [GSD-2022-1006922](https://insights.sbomify.com/GSD-2022-1006922/): mctp: prevent double key removal and unref (not scored)
- [GSD-2022-1006921](https://insights.sbomify.com/GSD-2022-1006921/): misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (not scored)
- [GSD-2022-1006920](https://insights.sbomify.com/GSD-2022-1006920/): io_uring/af_unix: defer registered files gc to io_uring release (not scored)
- [GSD-2022-1006919](https://insights.sbomify.com/GSD-2022-1006919/): ALSA: usb-audio: Fix potential memory leaks (not scored)
- [GSD-2022-1006918](https://insights.sbomify.com/GSD-2022-1006918/): cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/97/