# Vulnerabilities published in 2023


- [GSD-2023-1001887](https://insights.sbomify.com/GSD-2023-1001887/): ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (not scored)
- [GSD-2023-1001886](https://insights.sbomify.com/GSD-2023-1001886/): ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() (not scored)
- [GSD-2023-1001885](https://insights.sbomify.com/GSD-2023-1001885/): bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (not scored)
- [GSD-2023-1001884](https://insights.sbomify.com/GSD-2023-1001884/): arm64: dts: imx8mm-verdin: Do not power down eth-phy (not scored)
- [GSD-2023-1001883](https://insights.sbomify.com/GSD-2023-1001883/): net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (not scored)
- [GSD-2023-1001882](https://insights.sbomify.com/GSD-2023-1001882/): block, bfq: fix uaf for bfqq in bic_set_bfqq() (not scored)
- [GSD-2023-1001881](https://insights.sbomify.com/GSD-2023-1001881/): block, bfq: replace 0/1 with false/true in bic apis (not scored)
- [GSD-2023-1001880](https://insights.sbomify.com/GSD-2023-1001880/): fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (not scored)
- [GSD-2023-1001879](https://insights.sbomify.com/GSD-2023-1001879/): drm/i915: Fix request ref counting during error capture & debugfs dump (not scored)
- [GSD-2023-1001878](https://insights.sbomify.com/GSD-2023-1001878/): block: ublk: extending queue_size to fix overflow (not scored)
- [GSD-2023-1001877](https://insights.sbomify.com/GSD-2023-1001877/): squashfs: harden sanity check in squashfs_read_xattr_id_table (not scored)
- [GSD-2023-1001876](https://insights.sbomify.com/GSD-2023-1001876/): riscv: kprobe: Fixup kernel panic when probing an illegal position (not scored)
- [GSD-2023-1001875](https://insights.sbomify.com/GSD-2023-1001875/): can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (not scored)
- [GSD-2023-1001874](https://insights.sbomify.com/GSD-2023-1001874/): net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (not scored)
- [GSD-2023-1001873](https://insights.sbomify.com/GSD-2023-1001873/): efi: fix potential NULL deref in efi_mem_reserve_persistent (not scored)
- [GSD-2023-1001872](https://insights.sbomify.com/GSD-2023-1001872/): scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (not scored)
- [GSD-2023-1001871](https://insights.sbomify.com/GSD-2023-1001871/): scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (not scored)
- [GSD-2023-1001870](https://insights.sbomify.com/GSD-2023-1001870/): vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (not scored)
- [GSD-2023-1001869](https://insights.sbomify.com/GSD-2023-1001869/): fbcon: Check font dimension limits (not scored)
- [GSD-2023-1001868](https://insights.sbomify.com/GSD-2023-1001868/): cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() (not scored)
- [GSD-2023-1001867](https://insights.sbomify.com/GSD-2023-1001867/): can: isotp: split tx timer into transmission and timeout (not scored)
- [GSD-2023-1001866](https://insights.sbomify.com/GSD-2023-1001866/): nvmem: brcm_nvram: Add check for kzalloc (not scored)
- [GSD-2023-1001865](https://insights.sbomify.com/GSD-2023-1001865/): mm: multi-gen LRU: fix crash during cgroup migration (not scored)
- [GSD-2023-1001864](https://insights.sbomify.com/GSD-2023-1001864/): mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (not scored)
- [GSD-2023-1001863](https://insights.sbomify.com/GSD-2023-1001863/): usb: typec: ucsi: Don't attempt to resume the ports before they exist (not scored)
- [GSD-2023-1001862](https://insights.sbomify.com/GSD-2023-1001862/): HV: hv_balloon: fix memory leak with using debugfs_lookup() (not scored)
- [GSD-2023-1001861](https://insights.sbomify.com/GSD-2023-1001861/): fpga: m10bmc-sec: Fix probe rollback (not scored)
- [GSD-2023-1001860](https://insights.sbomify.com/GSD-2023-1001860/): mm/uffd: fix pte marker when fork() without fork event (not scored)
- [GSD-2023-1001859](https://insights.sbomify.com/GSD-2023-1001859/): kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (not scored)
- [GSD-2023-1001858](https://insights.sbomify.com/GSD-2023-1001858/): mm/khugepaged: fix ->anon_vma race (not scored)
- [GSD-2023-1001857](https://insights.sbomify.com/GSD-2023-1001857/): mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups (not scored)
- [GSD-2023-1001856](https://insights.sbomify.com/GSD-2023-1001856/): Squashfs: fix handling and sanity checking of xattr_ids count (not scored)
- [GSD-2023-1001855](https://insights.sbomify.com/GSD-2023-1001855/): mm/swapfile: add cond_resched() in get_swap_pages() (not scored)
- [GSD-2023-1001854](https://insights.sbomify.com/GSD-2023-1001854/): drm/i915: Avoid potential vm use-after-free (not scored)
- [GSD-2023-1001853](https://insights.sbomify.com/GSD-2023-1001853/): drm/i915: Fix potential bit_17 double-free (not scored)
- [GSD-2023-1001852](https://insights.sbomify.com/GSD-2023-1001852/): ASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on sink failure (not scored)
- [GSD-2023-1001851](https://insights.sbomify.com/GSD-2023-1001851/): nvmem: core: fix cleanup after dev_set_name() (not scored)
- [GSD-2023-1001850](https://insights.sbomify.com/GSD-2023-1001850/): ovl: Use "buf" flexible array for memcpy() destination (not scored)
- [GSD-2023-1001849](https://insights.sbomify.com/GSD-2023-1001849/): f2fs: initialize locks earlier in f2fs_fill_super() (not scored)
- [GSD-2023-1001848](https://insights.sbomify.com/GSD-2023-1001848/): fbdev: smscufx: fix error handling code in ufx_usb_probe (not scored)
- [GSD-2023-1001847](https://insights.sbomify.com/GSD-2023-1001847/): wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (not scored)
- [GSD-2023-1001846](https://insights.sbomify.com/GSD-2023-1001846/): gfs2: Always check inode size of inline inodes (not scored)
- [GSD-2023-1001845](https://insights.sbomify.com/GSD-2023-1001845/): bpf: Skip invalid kfunc call in backtrack_insn (not scored)
- [GSD-2023-1001844](https://insights.sbomify.com/GSD-2023-1001844/): f2fs: fix to do sanity check on i_extra_isize in is_alive() (not scored)
- [GSD-2023-1001843](https://insights.sbomify.com/GSD-2023-1001843/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1001842](https://insights.sbomify.com/GSD-2023-1001842/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1001841](https://insights.sbomify.com/GSD-2023-1001841/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1001840](https://insights.sbomify.com/GSD-2023-1001840/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1001839](https://insights.sbomify.com/GSD-2023-1001839/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1001838](https://insights.sbomify.com/GSD-2023-1001838/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1001837](https://insights.sbomify.com/GSD-2023-1001837/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1001836](https://insights.sbomify.com/GSD-2023-1001836/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1001835](https://insights.sbomify.com/GSD-2023-1001835/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1001834](https://insights.sbomify.com/GSD-2023-1001834/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1001833](https://insights.sbomify.com/GSD-2023-1001833/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1001832](https://insights.sbomify.com/GSD-2023-1001832/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1001831](https://insights.sbomify.com/GSD-2023-1001831/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1001830](https://insights.sbomify.com/GSD-2023-1001830/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1001829](https://insights.sbomify.com/GSD-2023-1001829/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1001828](https://insights.sbomify.com/GSD-2023-1001828/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1001827](https://insights.sbomify.com/GSD-2023-1001827/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1001826](https://insights.sbomify.com/GSD-2023-1001826/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1001825](https://insights.sbomify.com/GSD-2023-1001825/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1001824](https://insights.sbomify.com/GSD-2023-1001824/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1001823](https://insights.sbomify.com/GSD-2023-1001823/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1001822](https://insights.sbomify.com/GSD-2023-1001822/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1001821](https://insights.sbomify.com/GSD-2023-1001821/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1001820](https://insights.sbomify.com/GSD-2023-1001820/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1001819](https://insights.sbomify.com/GSD-2023-1001819/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1001818](https://insights.sbomify.com/GSD-2023-1001818/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1001817](https://insights.sbomify.com/GSD-2023-1001817/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1001816](https://insights.sbomify.com/GSD-2023-1001816/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)
- [GSD-2023-1001815](https://insights.sbomify.com/GSD-2023-1001815/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1001814](https://insights.sbomify.com/GSD-2023-1001814/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1001813](https://insights.sbomify.com/GSD-2023-1001813/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1001812](https://insights.sbomify.com/GSD-2023-1001812/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1001811](https://insights.sbomify.com/GSD-2023-1001811/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1001810](https://insights.sbomify.com/GSD-2023-1001810/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1001809](https://insights.sbomify.com/GSD-2023-1001809/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1001808](https://insights.sbomify.com/GSD-2023-1001808/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1001807](https://insights.sbomify.com/GSD-2023-1001807/): misc: fastrpc: Don't remove map on creater_process and device_release (not scored)
- [GSD-2023-1001806](https://insights.sbomify.com/GSD-2023-1001806/): misc: fastrpc: Fix use-after-free race condition for maps (not scored)
- [GSD-2023-1001805](https://insights.sbomify.com/GSD-2023-1001805/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1001804](https://insights.sbomify.com/GSD-2023-1001804/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (not scored)
- [GSD-2023-1001803](https://insights.sbomify.com/GSD-2023-1001803/): USB: gadgetfs: Fix race between mounting and unmounting (not scored)
- [GSD-2023-1001802](https://insights.sbomify.com/GSD-2023-1001802/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1001801](https://insights.sbomify.com/GSD-2023-1001801/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1001800](https://insights.sbomify.com/GSD-2023-1001800/): netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (not scored)
- [GSD-2023-1001799](https://insights.sbomify.com/GSD-2023-1001799/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1001798](https://insights.sbomify.com/GSD-2023-1001798/): drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (not scored)
- [GSD-2023-1001797](https://insights.sbomify.com/GSD-2023-1001797/): s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (not scored)
- [GSD-2023-1001796](https://insights.sbomify.com/GSD-2023-1001796/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1001795](https://insights.sbomify.com/GSD-2023-1001795/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1001794](https://insights.sbomify.com/GSD-2023-1001794/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1001793](https://insights.sbomify.com/GSD-2023-1001793/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1001792](https://insights.sbomify.com/GSD-2023-1001792/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)
- [GSD-2023-1001791](https://insights.sbomify.com/GSD-2023-1001791/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1001790](https://insights.sbomify.com/GSD-2023-1001790/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1001789](https://insights.sbomify.com/GSD-2023-1001789/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1001788](https://insights.sbomify.com/GSD-2023-1001788/): efi: fix NULL-deref in init error path (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/102/