# Vulnerabilities published in 2023


- [GSD-2023-1002087](https://insights.sbomify.com/GSD-2023-1002087/): RDMA/core: Fix ib block iterator counter overflow (not scored)
- [GSD-2023-1002086](https://insights.sbomify.com/GSD-2023-1002086/): IB/hfi1: Immediately remove invalid memory from hardware (not scored)
- [GSD-2023-1002085](https://insights.sbomify.com/GSD-2023-1002085/): NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (not scored)
- [GSD-2023-1002084](https://insights.sbomify.com/GSD-2023-1002084/): bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (not scored)
- [GSD-2023-1002083](https://insights.sbomify.com/GSD-2023-1002083/): net: nfc: Fix use-after-free in local_cleanup() (not scored)
- [GSD-2023-1002082](https://insights.sbomify.com/GSD-2023-1002082/): net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() (not scored)
- [GSD-2023-1002081](https://insights.sbomify.com/GSD-2023-1002081/): wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (not scored)
- [GSD-2023-1002080](https://insights.sbomify.com/GSD-2023-1002080/): net/sched: sch_taprio: fix possible use-after-free (not scored)
- [GSD-2023-1002079](https://insights.sbomify.com/GSD-2023-1002079/): l2tp: close all race conditions in l2tp_tunnel_register() (not scored)
- [GSD-2023-1002078](https://insights.sbomify.com/GSD-2023-1002078/): net: mdio: validate parameter addr in mdiobus_get_phy() (not scored)
- [GSD-2023-1002077](https://insights.sbomify.com/GSD-2023-1002077/): usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (not scored)
- [GSD-2023-1002076](https://insights.sbomify.com/GSD-2023-1002076/): Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (not scored)
- [GSD-2023-1002075](https://insights.sbomify.com/GSD-2023-1002075/): net: mlx5: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2023-1002074](https://insights.sbomify.com/GSD-2023-1002074/): dmaengine: Fix double increment of client_count in dma_chan_get() (not scored)
- [GSD-2023-1002073](https://insights.sbomify.com/GSD-2023-1002073/): l2tp: prevent lockdep issue in l2tp_tunnel_register() (not scored)
- [GSD-2023-1002072](https://insights.sbomify.com/GSD-2023-1002072/): HID: betop: check shape of output reports (not scored)
- [GSD-2023-1002071](https://insights.sbomify.com/GSD-2023-1002071/): ptdma: pt_core_execute_cmd() should use spinlock (not scored)
- [GSD-2023-1002070](https://insights.sbomify.com/GSD-2023-1002070/): device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() (not scored)
- [GSD-2023-1002069](https://insights.sbomify.com/GSD-2023-1002069/): w1: fix WARNING after calling w1_process() (not scored)
- [GSD-2023-1002068](https://insights.sbomify.com/GSD-2023-1002068/): thermal/core: fix error code in __thermal_cooling_device_register() (not scored)
- [GSD-2023-1002067](https://insights.sbomify.com/GSD-2023-1002067/): net: stmmac: enable all safety features by default (not scored)
- [GSD-2023-1002066](https://insights.sbomify.com/GSD-2023-1002066/): thermal: core: call put_device() only after device_register() fails (not scored)
- [GSD-2023-1002065](https://insights.sbomify.com/GSD-2023-1002065/): tracing: Make sure trace_printk() can output as soon as it can be used (not scored)
- [GSD-2023-1002064](https://insights.sbomify.com/GSD-2023-1002064/): trace_events_hist: add check for return value of 'create_hist_field' (not scored)
- [GSD-2023-1002063](https://insights.sbomify.com/GSD-2023-1002063/): cifs: Fix oops due to uncleared server->smbd_conn in reconnect (not scored)
- [GSD-2023-1002062](https://insights.sbomify.com/GSD-2023-1002062/): EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (not scored)
- [GSD-2023-1002061](https://insights.sbomify.com/GSD-2023-1002061/): i2c: designware: use casting of u64 in clock multiplication to avoid overflow (not scored)
- [GSD-2023-1002060](https://insights.sbomify.com/GSD-2023-1002060/): netlink: prevent potential spectre v1 gadgets (not scored)
- [GSD-2023-1002059](https://insights.sbomify.com/GSD-2023-1002059/): net: fix UaF in netns ops registration error path (not scored)
- [GSD-2023-1002058](https://insights.sbomify.com/GSD-2023-1002058/): ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (not scored)
- [GSD-2023-1002057](https://insights.sbomify.com/GSD-2023-1002057/): ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (not scored)
- [GSD-2023-1002056](https://insights.sbomify.com/GSD-2023-1002056/): netrom: Fix use-after-free of a listening socket. (not scored)
- [GSD-2023-1002055](https://insights.sbomify.com/GSD-2023-1002055/): net/sched: sch_taprio: do not schedule in taprio_reset() (not scored)
- [GSD-2023-1002054](https://insights.sbomify.com/GSD-2023-1002054/): riscv/kprobe: Fix instruction simulation of JALR (not scored)
- [GSD-2023-1002053](https://insights.sbomify.com/GSD-2023-1002053/): x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (not scored)
- [GSD-2023-1002052](https://insights.sbomify.com/GSD-2023-1002052/): perf/x86/amd: fix potential integer overflow on shift of a int (not scored)
- [GSD-2023-1002051](https://insights.sbomify.com/GSD-2023-1002051/): bpf: Skip task with pid=1 in send_signal_common() (not scored)
- [GSD-2023-1002050](https://insights.sbomify.com/GSD-2023-1002050/): erofs/zmap.c: Fix incorrect offset calculation (not scored)
- [GSD-2023-1002049](https://insights.sbomify.com/GSD-2023-1002049/): net: fix NULL pointer in skb_segment_list (not scored)
- [GSD-2023-1002048](https://insights.sbomify.com/GSD-2023-1002048/): firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (not scored)
- [GSD-2023-1002047](https://insights.sbomify.com/GSD-2023-1002047/): dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (not scored)
- [GSD-2023-1002046](https://insights.sbomify.com/GSD-2023-1002046/): ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (not scored)
- [GSD-2023-1002045](https://insights.sbomify.com/GSD-2023-1002045/): bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (not scored)
- [GSD-2023-1002044](https://insights.sbomify.com/GSD-2023-1002044/): net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (not scored)
- [GSD-2023-1002043](https://insights.sbomify.com/GSD-2023-1002043/): block, bfq: fix uaf for bfqq in bic_set_bfqq() (not scored)
- [GSD-2023-1002042](https://insights.sbomify.com/GSD-2023-1002042/): block, bfq: replace 0/1 with false/true in bic apis (not scored)
- [GSD-2023-1002041](https://insights.sbomify.com/GSD-2023-1002041/): squashfs: harden sanity check in squashfs_read_xattr_id_table (not scored)
- [GSD-2023-1002040](https://insights.sbomify.com/GSD-2023-1002040/): riscv: kprobe: Fixup kernel panic when probing an illegal position (not scored)
- [GSD-2023-1002039](https://insights.sbomify.com/GSD-2023-1002039/): can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (not scored)
- [GSD-2023-1002038](https://insights.sbomify.com/GSD-2023-1002038/): net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (not scored)
- [GSD-2023-1002037](https://insights.sbomify.com/GSD-2023-1002037/): efi: fix potential NULL deref in efi_mem_reserve_persistent (not scored)
- [GSD-2023-1002036](https://insights.sbomify.com/GSD-2023-1002036/): vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (not scored)
- [GSD-2023-1002035](https://insights.sbomify.com/GSD-2023-1002035/): fbcon: Check font dimension limits (not scored)
- [GSD-2023-1002034](https://insights.sbomify.com/GSD-2023-1002034/): scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (not scored)
- [GSD-2023-1002033](https://insights.sbomify.com/GSD-2023-1002033/): scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (not scored)
- [GSD-2023-1002032](https://insights.sbomify.com/GSD-2023-1002032/): kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (not scored)
- [GSD-2023-1002031](https://insights.sbomify.com/GSD-2023-1002031/): Squashfs: fix handling and sanity checking of xattr_ids count (not scored)
- [GSD-2023-1002030](https://insights.sbomify.com/GSD-2023-1002030/): drm/i915: Fix potential bit_17 double-free (not scored)
- [GSD-2023-1002029](https://insights.sbomify.com/GSD-2023-1002029/): mm/swapfile: add cond_resched() in get_swap_pages() (not scored)
- [GSD-2023-1002028](https://insights.sbomify.com/GSD-2023-1002028/): ovl: Use "buf" flexible array for memcpy() destination (not scored)
- [GSD-2023-1002027](https://insights.sbomify.com/GSD-2023-1002027/): fbdev: smscufx: fix error handling code in ufx_usb_probe (not scored)
- [GSD-2023-1002026](https://insights.sbomify.com/GSD-2023-1002026/): f2fs: fix to do sanity check on i_extra_isize in is_alive() (not scored)
- [GSD-2023-1002025](https://insights.sbomify.com/GSD-2023-1002025/): wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (not scored)
- [GSD-2023-1002024](https://insights.sbomify.com/GSD-2023-1002024/): gfs2: Always check inode size of inline inodes (not scored)
- [GSD-2023-1002023](https://insights.sbomify.com/GSD-2023-1002023/): bpf: Skip invalid kfunc call in backtrack_insn (not scored)
- [GSD-2023-1002022](https://insights.sbomify.com/GSD-2023-1002022/): netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (not scored)
- [GSD-2023-1002021](https://insights.sbomify.com/GSD-2023-1002021/): io_uring/poll: add hash if ready poll request can't complete inline (not scored)
- [GSD-2023-1002020](https://insights.sbomify.com/GSD-2023-1002020/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1002019](https://insights.sbomify.com/GSD-2023-1002019/): drm/i915: Fix potential context UAFs (not scored)
- [GSD-2023-1002018](https://insights.sbomify.com/GSD-2023-1002018/): s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (not scored)
- [GSD-2023-1002017](https://insights.sbomify.com/GSD-2023-1002017/): drm/msm: another fix for the headless Adreno GPU (not scored)
- [GSD-2023-1002016](https://insights.sbomify.com/GSD-2023-1002016/): arm64/mm: fix incorrect file_map_count for invalid pmd (not scored)
- [GSD-2023-1002015](https://insights.sbomify.com/GSD-2023-1002015/): drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (not scored)
- [GSD-2023-1002014](https://insights.sbomify.com/GSD-2023-1002014/): drm/amdgpu: Fixed bug on error when unloading amdgpu (not scored)
- [GSD-2023-1002013](https://insights.sbomify.com/GSD-2023-1002013/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1002012](https://insights.sbomify.com/GSD-2023-1002012/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1002011](https://insights.sbomify.com/GSD-2023-1002011/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1002010](https://insights.sbomify.com/GSD-2023-1002010/): iommu/iova: Fix alloc iova overflows issue (not scored)
- [GSD-2023-1002009](https://insights.sbomify.com/GSD-2023-1002009/): sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (not scored)
- [GSD-2023-1002008](https://insights.sbomify.com/GSD-2023-1002008/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1002007](https://insights.sbomify.com/GSD-2023-1002007/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)
- [GSD-2023-1002006](https://insights.sbomify.com/GSD-2023-1002006/): x86/resctrl: Fix event counts regression in reused RMIDs (not scored)
- [GSD-2023-1002005](https://insights.sbomify.com/GSD-2023-1002005/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1002004](https://insights.sbomify.com/GSD-2023-1002004/): scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (not scored)
- [GSD-2023-1002003](https://insights.sbomify.com/GSD-2023-1002003/): ASoC: Intel: sof-nau8825: fix module alias overflow (not scored)
- [GSD-2023-1002002](https://insights.sbomify.com/GSD-2023-1002002/): drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path (not scored)
- [GSD-2023-1002001](https://insights.sbomify.com/GSD-2023-1002001/): nfsd: fix handling of cached open files in nfsd4_open codepath (not scored)
- [GSD-2023-1002000](https://insights.sbomify.com/GSD-2023-1002000/): sched/core: Fix arch_scale_freq_tick() on tickless systems (not scored)
- [GSD-2023-1001999](https://insights.sbomify.com/GSD-2023-1001999/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1001998](https://insights.sbomify.com/GSD-2023-1001998/): drm/amdgpu: Fix potential NULL dereference (not scored)
- [GSD-2023-1001997](https://insights.sbomify.com/GSD-2023-1001997/): ice: Fix potential memory leak in ice_gnss_tty_write() (not scored)
- [GSD-2023-1001996](https://insights.sbomify.com/GSD-2023-1001996/): ice: Add check for kzalloc (not scored)
- [GSD-2023-1001995](https://insights.sbomify.com/GSD-2023-1001995/): drm/vmwgfx: Remove rcu locks from user resources (not scored)
- [GSD-2023-1001994](https://insights.sbomify.com/GSD-2023-1001994/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1001993](https://insights.sbomify.com/GSD-2023-1001993/): net/mlx5: Fix command stats access after free (not scored)
- [GSD-2023-1001992](https://insights.sbomify.com/GSD-2023-1001992/): net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (not scored)
- [GSD-2023-1001991](https://insights.sbomify.com/GSD-2023-1001991/): net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (not scored)
- [GSD-2023-1001990](https://insights.sbomify.com/GSD-2023-1001990/): octeontx2-pf: Fix resource leakage in VF driver unbind (not scored)
- [GSD-2023-1001989](https://insights.sbomify.com/GSD-2023-1001989/): platform/surface: aggregator: Add missing call to ssam_request_sync_free() (not scored)
- [GSD-2023-1001988](https://insights.sbomify.com/GSD-2023-1001988/): platform/x86/amd: Fix refcount leak in amd_pmc_probe (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/100/