# Vulnerabilities published in 2023


- [GSD-2023-1001987](https://insights.sbomify.com/GSD-2023-1001987/): ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (not scored)
- [GSD-2023-1001986](https://insights.sbomify.com/GSD-2023-1001986/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1001985](https://insights.sbomify.com/GSD-2023-1001985/): io_uring/io-wq: only free worker if it was allocated for creation (not scored)
- [GSD-2023-1001984](https://insights.sbomify.com/GSD-2023-1001984/): io_uring: lock overflowing for IOPOLL (not scored)
- [GSD-2023-1001983](https://insights.sbomify.com/GSD-2023-1001983/): Bluetooth: hci_qca: Fix driver shutdown on closed serdev (not scored)
- [GSD-2023-1001982](https://insights.sbomify.com/GSD-2023-1001982/): btrfs: always report error in run_one_delayed_ref() (not scored)
- [GSD-2023-1001981](https://insights.sbomify.com/GSD-2023-1001981/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1001980](https://insights.sbomify.com/GSD-2023-1001980/): fbdev: omapfb: avoid stack overflow warning (not scored)
- [GSD-2023-1001979](https://insights.sbomify.com/GSD-2023-1001979/): wifi: mac80211: fix initialization of rx->link and rx->link_sta (not scored)
- [GSD-2023-1001978](https://insights.sbomify.com/GSD-2023-1001978/): nommu: fix memory leak in do_mmap() error path (not scored)
- [GSD-2023-1001977](https://insights.sbomify.com/GSD-2023-1001977/): wifi: mac80211: sdata can be NULL during AMPDU start (not scored)
- [GSD-2023-1001976](https://insights.sbomify.com/GSD-2023-1001976/): proc: fix PIE proc-empty-vm, proc-pid-vm tests (not scored)
- [GSD-2023-1001975](https://insights.sbomify.com/GSD-2023-1001975/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1001974](https://insights.sbomify.com/GSD-2023-1001974/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1001973](https://insights.sbomify.com/GSD-2023-1001973/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1001972](https://insights.sbomify.com/GSD-2023-1001972/): misc: fastrpc: Fix use-after-free and race in fastrpc_map_find (not scored)
- [GSD-2023-1001971](https://insights.sbomify.com/GSD-2023-1001971/): misc: fastrpc: Don't remove map on creater_process and device_release (not scored)
- [GSD-2023-1001970](https://insights.sbomify.com/GSD-2023-1001970/): misc: fastrpc: Fix use-after-free race condition for maps (not scored)
- [GSD-2023-1001969](https://insights.sbomify.com/GSD-2023-1001969/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1001968](https://insights.sbomify.com/GSD-2023-1001968/): mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() (not scored)
- [GSD-2023-1001967](https://insights.sbomify.com/GSD-2023-1001967/): btrfs: qgroup: do not warn on record without old_roots populated (not scored)
- [GSD-2023-1001966](https://insights.sbomify.com/GSD-2023-1001966/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (not scored)
- [GSD-2023-1001965](https://insights.sbomify.com/GSD-2023-1001965/): btrfs: do not abort transaction on failure to write log tree when syncing log (not scored)
- [GSD-2023-1001964](https://insights.sbomify.com/GSD-2023-1001964/): tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (not scored)
- [GSD-2023-1001963](https://insights.sbomify.com/GSD-2023-1001963/): tty: fix possible null-ptr-defer in spk_ttyio_release (not scored)
- [GSD-2023-1001962](https://insights.sbomify.com/GSD-2023-1001962/): io_uring/poll: don't reissue in case of poll race on multishot request (not scored)
- [GSD-2023-1001961](https://insights.sbomify.com/GSD-2023-1001961/): USB: gadgetfs: Fix race between mounting and unmounting (not scored)
- [GSD-2023-1001960](https://insights.sbomify.com/GSD-2023-1001960/): dmaengine: idxd: Let probe fail when workqueue cannot be enabled (not scored)
- [GSD-2023-1001959](https://insights.sbomify.com/GSD-2023-1001959/): dmaengine: idxd: Prevent use after free on completion memory (not scored)
- [GSD-2023-1001958](https://insights.sbomify.com/GSD-2023-1001958/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1001957](https://insights.sbomify.com/GSD-2023-1001957/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1001956](https://insights.sbomify.com/GSD-2023-1001956/): drm/amd/display: Calculate output_color_space after pixel encoding adjustment (not scored)
- [GSD-2023-1001955](https://insights.sbomify.com/GSD-2023-1001955/): VMCI: Use threaded irqs instead of tasklets (not scored)
- [GSD-2023-1001954](https://insights.sbomify.com/GSD-2023-1001954/): octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (not scored)
- [GSD-2023-1001953](https://insights.sbomify.com/GSD-2023-1001953/): octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (not scored)
- [GSD-2023-1001952](https://insights.sbomify.com/GSD-2023-1001952/): Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" (not scored)
- [GSD-2023-1001951](https://insights.sbomify.com/GSD-2023-1001951/): HID: intel_ish-hid: Add check for ishtp_dma_tx_map (not scored)
- [GSD-2023-1001950](https://insights.sbomify.com/GSD-2023-1001950/): dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (not scored)
- [GSD-2023-1001949](https://insights.sbomify.com/GSD-2023-1001949/): reset: uniphier-glue: Fix possible null-ptr-deref (not scored)
- [GSD-2023-1001948](https://insights.sbomify.com/GSD-2023-1001948/): EDAC/highbank: Fix memory leak in highbank_mc_probe() (not scored)
- [GSD-2023-1001947](https://insights.sbomify.com/GSD-2023-1001947/): RDMA/rxe: Prevent faulty rkey generation (not scored)
- [GSD-2023-1001946](https://insights.sbomify.com/GSD-2023-1001946/): erofs: fix kvcalloc() misuse with __GFP_NOFAIL (not scored)
- [GSD-2023-1001945](https://insights.sbomify.com/GSD-2023-1001945/): RDMA/core: Fix ib block iterator counter overflow (not scored)
- [GSD-2023-1001944](https://insights.sbomify.com/GSD-2023-1001944/): IB/hfi1: Immediately remove invalid memory from hardware (not scored)
- [GSD-2023-1001943](https://insights.sbomify.com/GSD-2023-1001943/): NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (not scored)
- [GSD-2023-1001942](https://insights.sbomify.com/GSD-2023-1001942/): phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe() (not scored)
- [GSD-2023-1001941](https://insights.sbomify.com/GSD-2023-1001941/): bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (not scored)
- [GSD-2023-1001940](https://insights.sbomify.com/GSD-2023-1001940/): net: nfc: Fix use-after-free in local_cleanup() (not scored)
- [GSD-2023-1001939](https://insights.sbomify.com/GSD-2023-1001939/): net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() (not scored)
- [GSD-2023-1001938](https://insights.sbomify.com/GSD-2023-1001938/): wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (not scored)
- [GSD-2023-1001937](https://insights.sbomify.com/GSD-2023-1001937/): net/sched: sch_taprio: fix possible use-after-free (not scored)
- [GSD-2023-1001936](https://insights.sbomify.com/GSD-2023-1001936/): l2tp: close all race conditions in l2tp_tunnel_register() (not scored)
- [GSD-2023-1001935](https://insights.sbomify.com/GSD-2023-1001935/): net: mdio: validate parameter addr in mdiobus_get_phy() (not scored)
- [GSD-2023-1001934](https://insights.sbomify.com/GSD-2023-1001934/): usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (not scored)
- [GSD-2023-1001933](https://insights.sbomify.com/GSD-2023-1001933/): Bluetooth: Fix a buffer overflow in mgmt_mesh_add() (not scored)
- [GSD-2023-1001932](https://insights.sbomify.com/GSD-2023-1001932/): Bluetooth: hci_conn: Fix memory leaks (not scored)
- [GSD-2023-1001931](https://insights.sbomify.com/GSD-2023-1001931/): Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() (not scored)
- [GSD-2023-1001930](https://insights.sbomify.com/GSD-2023-1001930/): net/mlx5e: Avoid false lock dependency warning on tc_ht even more (not scored)
- [GSD-2023-1001929](https://insights.sbomify.com/GSD-2023-1001929/): Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (not scored)
- [GSD-2023-1001928](https://insights.sbomify.com/GSD-2023-1001928/): net: mlx5: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2023-1001927](https://insights.sbomify.com/GSD-2023-1001927/): dmaengine: Fix double increment of client_count in dma_chan_get() (not scored)
- [GSD-2023-1001926](https://insights.sbomify.com/GSD-2023-1001926/): l2tp: prevent lockdep issue in l2tp_tunnel_register() (not scored)
- [GSD-2023-1001925](https://insights.sbomify.com/GSD-2023-1001925/): HID: betop: check shape of output reports (not scored)
- [GSD-2023-1001924](https://insights.sbomify.com/GSD-2023-1001924/): dmaengine: tegra: Fix memory leak in terminate_all() (not scored)
- [GSD-2023-1001923](https://insights.sbomify.com/GSD-2023-1001923/): ptdma: pt_core_execute_cmd() should use spinlock (not scored)
- [GSD-2023-1001922](https://insights.sbomify.com/GSD-2023-1001922/): device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() (not scored)
- [GSD-2023-1001921](https://insights.sbomify.com/GSD-2023-1001921/): w1: fix WARNING after calling w1_process() (not scored)
- [GSD-2023-1001920](https://insights.sbomify.com/GSD-2023-1001920/): thermal/core: fix error code in __thermal_cooling_device_register() (not scored)
- [GSD-2023-1001919](https://insights.sbomify.com/GSD-2023-1001919/): thermal: core: call put_device() only after device_register() fails (not scored)
- [GSD-2023-1001918](https://insights.sbomify.com/GSD-2023-1001918/): net: stmmac: enable all safety features by default (not scored)
- [GSD-2023-1001917](https://insights.sbomify.com/GSD-2023-1001917/): bnxt: Do not read past the end of test names (not scored)
- [GSD-2023-1001916](https://insights.sbomify.com/GSD-2023-1001916/): cpufreq: CPPC: Add u64 casts to avoid overflowing (not scored)
- [GSD-2023-1001915](https://insights.sbomify.com/GSD-2023-1001915/): drm/amdkfd: Add sync after creating vram bo (not scored)
- [GSD-2023-1001914](https://insights.sbomify.com/GSD-2023-1001914/): cifs: fix potential memory leaks in session setup (not scored)
- [GSD-2023-1001913](https://insights.sbomify.com/GSD-2023-1001913/): tracing: Make sure trace_printk() can output as soon as it can be used (not scored)
- [GSD-2023-1001912](https://insights.sbomify.com/GSD-2023-1001912/): cifs: Fix oops due to uncleared server->smbd_conn in reconnect (not scored)
- [GSD-2023-1001911](https://insights.sbomify.com/GSD-2023-1001911/): trace_events_hist: add check for return value of 'create_hist_field' (not scored)
- [GSD-2023-1001910](https://insights.sbomify.com/GSD-2023-1001910/): ovl: fix tmpfile leak (not scored)
- [GSD-2023-1001909](https://insights.sbomify.com/GSD-2023-1001909/): EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (not scored)
- [GSD-2023-1001908](https://insights.sbomify.com/GSD-2023-1001908/): i2c: designware: use casting of u64 in clock multiplication to avoid overflow (not scored)
- [GSD-2023-1001907](https://insights.sbomify.com/GSD-2023-1001907/): drm/i915: Fix a memory leak with reused mmap_offset (not scored)
- [GSD-2023-1001906](https://insights.sbomify.com/GSD-2023-1001906/): drm/drm_vma_manager: Add drm_vma_node_allow_once() (not scored)
- [GSD-2023-1001905](https://insights.sbomify.com/GSD-2023-1001905/): netlink: prevent potential spectre v1 gadgets (not scored)
- [GSD-2023-1001904](https://insights.sbomify.com/GSD-2023-1001904/): iavf: schedule watchdog immediately when changing primary MAC (not scored)
- [GSD-2023-1001903](https://insights.sbomify.com/GSD-2023-1001903/): net: fix UaF in netns ops registration error path (not scored)
- [GSD-2023-1001902](https://insights.sbomify.com/GSD-2023-1001902/): net: fec: Use page_pool_put_full_page when freeing rx buffers (not scored)
- [GSD-2023-1001901](https://insights.sbomify.com/GSD-2023-1001901/): ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (not scored)
- [GSD-2023-1001900](https://insights.sbomify.com/GSD-2023-1001900/): ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (not scored)
- [GSD-2023-1001899](https://insights.sbomify.com/GSD-2023-1001899/): netrom: Fix use-after-free of a listening socket. (not scored)
- [GSD-2023-1001898](https://insights.sbomify.com/GSD-2023-1001898/): net/sched: sch_taprio: do not schedule in taprio_reset() (not scored)
- [GSD-2023-1001897](https://insights.sbomify.com/GSD-2023-1001897/): riscv/kprobe: Fix instruction simulation of JALR (not scored)
- [GSD-2023-1001896](https://insights.sbomify.com/GSD-2023-1001896/): acpi: Fix suspend with Xen PV (not scored)
- [GSD-2023-1001895](https://insights.sbomify.com/GSD-2023-1001895/): x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (not scored)
- [GSD-2023-1001894](https://insights.sbomify.com/GSD-2023-1001894/): perf/x86/amd: fix potential integer overflow on shift of a int (not scored)
- [GSD-2023-1001893](https://insights.sbomify.com/GSD-2023-1001893/): bpf: Skip task with pid=1 in send_signal_common() (not scored)
- [GSD-2023-1001892](https://insights.sbomify.com/GSD-2023-1001892/): erofs/zmap.c: Fix incorrect offset calculation (not scored)
- [GSD-2023-1001891](https://insights.sbomify.com/GSD-2023-1001891/): net: fix NULL pointer in skb_segment_list (not scored)
- [GSD-2023-1001890](https://insights.sbomify.com/GSD-2023-1001890/): s390: workaround invalid gcc-11 out of bounds read warning (not scored)
- [GSD-2023-1001889](https://insights.sbomify.com/GSD-2023-1001889/): firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (not scored)
- [GSD-2023-1001888](https://insights.sbomify.com/GSD-2023-1001888/): dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/101/