Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 100 of 430.
- GSD-2023-1002087 RDMA/core: Fix ib block iterator counter overflow
- GSD-2023-1002086 IB/hfi1: Immediately remove invalid memory from hardware
- GSD-2023-1002085 NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
- GSD-2023-1002084 bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
- GSD-2023-1002083 net: nfc: Fix use-after-free in local_cleanup()
- GSD-2023-1002082 net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
- GSD-2023-1002081 wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
- GSD-2023-1002080 net/sched: sch_taprio: fix possible use-after-free
- GSD-2023-1002079 l2tp: close all race conditions in l2tp_tunnel_register()
- GSD-2023-1002078 net: mdio: validate parameter addr in mdiobus_get_phy()
- GSD-2023-1002077 usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- GSD-2023-1002076 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
- GSD-2023-1002075 net: mlx5: eliminate anonymous module_init & module_exit
- GSD-2023-1002074 dmaengine: Fix double increment of client_count in dma_chan_get()
- GSD-2023-1002073 l2tp: prevent lockdep issue in l2tp_tunnel_register()
- GSD-2023-1002072 HID: betop: check shape of output reports
- GSD-2023-1002071 ptdma: pt_core_execute_cmd() should use spinlock
- GSD-2023-1002070 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint()
- GSD-2023-1002069 w1: fix WARNING after calling w1_process()
- GSD-2023-1002068 thermal/core: fix error code in __thermal_cooling_device_register()
- GSD-2023-1002067 net: stmmac: enable all safety features by default
- GSD-2023-1002066 thermal: core: call put_device() only after device_register() fails
- GSD-2023-1002065 tracing: Make sure trace_printk() can output as soon as it can be used
- GSD-2023-1002064 trace_events_hist: add check for return value of 'create_hist_field'
- GSD-2023-1002063 cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- GSD-2023-1002062 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
- GSD-2023-1002061 i2c: designware: use casting of u64 in clock multiplication to avoid overflow
- GSD-2023-1002060 netlink: prevent potential spectre v1 gadgets
- GSD-2023-1002059 net: fix UaF in netns ops registration error path
- GSD-2023-1002058 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- GSD-2023-1002057 ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- GSD-2023-1002056 netrom: Fix use-after-free of a listening socket.
- GSD-2023-1002055 net/sched: sch_taprio: do not schedule in taprio_reset()
- GSD-2023-1002054 riscv/kprobe: Fix instruction simulation of JALR
- GSD-2023-1002053 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- GSD-2023-1002052 perf/x86/amd: fix potential integer overflow on shift of a int
- GSD-2023-1002051 bpf: Skip task with pid=1 in send_signal_common()
- GSD-2023-1002050 erofs/zmap.c: Fix incorrect offset calculation
- GSD-2023-1002049 net: fix NULL pointer in skb_segment_list
- GSD-2023-1002048 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
- GSD-2023-1002047 dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
- GSD-2023-1002046 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- GSD-2023-1002045 bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- GSD-2023-1002044 net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
- GSD-2023-1002043 block, bfq: fix uaf for bfqq in bic_set_bfqq()
- GSD-2023-1002042 block, bfq: replace 0/1 with false/true in bic apis
- GSD-2023-1002041 squashfs: harden sanity check in squashfs_read_xattr_id_table
- GSD-2023-1002040 riscv: kprobe: Fixup kernel panic when probing an illegal position
- GSD-2023-1002039 can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
- GSD-2023-1002038 net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- GSD-2023-1002037 efi: fix potential NULL deref in efi_mem_reserve_persistent
- GSD-2023-1002036 vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- GSD-2023-1002035 fbcon: Check font dimension limits
- GSD-2023-1002034 scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- GSD-2023-1002033 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- GSD-2023-1002032 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
- GSD-2023-1002031 Squashfs: fix handling and sanity checking of xattr_ids count
- GSD-2023-1002030 drm/i915: Fix potential bit_17 double-free
- GSD-2023-1002029 mm/swapfile: add cond_resched() in get_swap_pages()
- GSD-2023-1002028 ovl: Use "buf" flexible array for memcpy() destination
- GSD-2023-1002027 fbdev: smscufx: fix error handling code in ufx_usb_probe
- GSD-2023-1002026 f2fs: fix to do sanity check on i_extra_isize in is_alive()
- GSD-2023-1002025 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
- GSD-2023-1002024 gfs2: Always check inode size of inline inodes
- GSD-2023-1002023 bpf: Skip invalid kfunc call in backtrack_insn
- GSD-2023-1002022 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
- GSD-2023-1002021 io_uring/poll: add hash if ready poll request can't complete inline
- GSD-2023-1002020 drm/virtio: Fix GEM handle creation UAF
- GSD-2023-1002019 drm/i915: Fix potential context UAFs
- GSD-2023-1002018 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
- GSD-2023-1002017 drm/msm: another fix for the headless Adreno GPU
- GSD-2023-1002016 arm64/mm: fix incorrect file_map_count for invalid pmd
- GSD-2023-1002015 drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
- GSD-2023-1002014 drm/amdgpu: Fixed bug on error when unloading amdgpu
- GSD-2023-1002013 ixgbe: fix pci device refcount leak
- GSD-2023-1002012 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- GSD-2023-1002011 mm: Always release pages to the buddy allocator in memblock_free_late().
- GSD-2023-1002010 iommu/iova: Fix alloc iova overflows issue
- GSD-2023-1002009 sched/core: Fix use-after-free bug in dup_user_cpus_ptr()
- GSD-2023-1002008 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
- GSD-2023-1002007 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
- GSD-2023-1002006 x86/resctrl: Fix event counts regression in reused RMIDs
- GSD-2023-1002005 regulator: da9211: Use irq handler when ready
- GSD-2023-1002004 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM
- GSD-2023-1002003 ASoC: Intel: sof-nau8825: fix module alias overflow
- GSD-2023-1002002 drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path
- GSD-2023-1002001 nfsd: fix handling of cached open files in nfsd4_open codepath
- GSD-2023-1002000 sched/core: Fix arch_scale_freq_tick() on tickless systems
- GSD-2023-1001999 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- GSD-2023-1001998 drm/amdgpu: Fix potential NULL dereference
- GSD-2023-1001997 ice: Fix potential memory leak in ice_gnss_tty_write()
- GSD-2023-1001996 ice: Add check for kzalloc
- GSD-2023-1001995 drm/vmwgfx: Remove rcu locks from user resources
- GSD-2023-1001994 net/sched: act_mpls: Fix warning during failed attribute validation
- GSD-2023-1001993 net/mlx5: Fix command stats access after free
- GSD-2023-1001992 net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent
- GSD-2023-1001991 net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)
- GSD-2023-1001990 octeontx2-pf: Fix resource leakage in VF driver unbind
- GSD-2023-1001989 platform/surface: aggregator: Add missing call to ssam_request_sync_free()
- GSD-2023-1001988 platform/x86/amd: Fix refcount leak in amd_pmc_probe