# Vulnerabilities published in 2023


- [GSD-2023-1001787](https://insights.sbomify.com/GSD-2023-1001787/): io_uring/io-wq: only free worker if it was allocated for creation (not scored)
- [GSD-2023-1001786](https://insights.sbomify.com/GSD-2023-1001786/): io_uring: lock overflowing for IOPOLL (not scored)
- [GSD-2023-1001785](https://insights.sbomify.com/GSD-2023-1001785/): Bluetooth: hci_qca: Fix driver shutdown on closed serdev (not scored)
- [GSD-2023-1001784](https://insights.sbomify.com/GSD-2023-1001784/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1001783](https://insights.sbomify.com/GSD-2023-1001783/): btrfs: always report error in run_one_delayed_ref() (not scored)
- [GSD-2023-1001782](https://insights.sbomify.com/GSD-2023-1001782/): wifi: mac80211: sdata can be NULL during AMPDU start (not scored)
- [GSD-2023-1001781](https://insights.sbomify.com/GSD-2023-1001781/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1001780](https://insights.sbomify.com/GSD-2023-1001780/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1001779](https://insights.sbomify.com/GSD-2023-1001779/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1001778](https://insights.sbomify.com/GSD-2023-1001778/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1001777](https://insights.sbomify.com/GSD-2023-1001777/): misc: fastrpc: Fix use-after-free race condition for maps (not scored)
- [GSD-2023-1001776](https://insights.sbomify.com/GSD-2023-1001776/): misc: fastrpc: Don't remove map on creater_process and device_release (not scored)
- [GSD-2023-1001775](https://insights.sbomify.com/GSD-2023-1001775/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (not scored)
- [GSD-2023-1001774](https://insights.sbomify.com/GSD-2023-1001774/): tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (not scored)
- [GSD-2023-1001773](https://insights.sbomify.com/GSD-2023-1001773/): USB: gadgetfs: Fix race between mounting and unmounting (not scored)
- [GSD-2023-1001772](https://insights.sbomify.com/GSD-2023-1001772/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1001771](https://insights.sbomify.com/GSD-2023-1001771/): drm/amd/display: Calculate output_color_space after pixel encoding adjustment (not scored)
- [GSD-2023-1001770](https://insights.sbomify.com/GSD-2023-1001770/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1001769](https://insights.sbomify.com/GSD-2023-1001769/): netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (not scored)
- [GSD-2023-1001768](https://insights.sbomify.com/GSD-2023-1001768/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1001767](https://insights.sbomify.com/GSD-2023-1001767/): s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (not scored)
- [GSD-2023-1001766](https://insights.sbomify.com/GSD-2023-1001766/): drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (not scored)
- [GSD-2023-1001765](https://insights.sbomify.com/GSD-2023-1001765/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1001764](https://insights.sbomify.com/GSD-2023-1001764/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1001763](https://insights.sbomify.com/GSD-2023-1001763/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1001762](https://insights.sbomify.com/GSD-2023-1001762/): iommu/iova: Fix alloc iova overflows issue (not scored)
- [GSD-2023-1001761](https://insights.sbomify.com/GSD-2023-1001761/): sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (not scored)
- [GSD-2023-1001760](https://insights.sbomify.com/GSD-2023-1001760/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1001759](https://insights.sbomify.com/GSD-2023-1001759/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)
- [GSD-2023-1001758](https://insights.sbomify.com/GSD-2023-1001758/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1001757](https://insights.sbomify.com/GSD-2023-1001757/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1001756](https://insights.sbomify.com/GSD-2023-1001756/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1001755](https://insights.sbomify.com/GSD-2023-1001755/): platform/surface: aggregator: Add missing call to ssam_request_sync_free() (not scored)
- [GSD-2023-1001754](https://insights.sbomify.com/GSD-2023-1001754/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1001753](https://insights.sbomify.com/GSD-2023-1001753/): io_uring/io-wq: only free worker if it was allocated for creation (not scored)
- [GSD-2023-1001752](https://insights.sbomify.com/GSD-2023-1001752/): io_uring: lock overflowing for IOPOLL (not scored)
- [GSD-2023-1001751](https://insights.sbomify.com/GSD-2023-1001751/): Bluetooth: hci_qca: Fix driver shutdown on closed serdev (not scored)
- [GSD-2023-1001750](https://insights.sbomify.com/GSD-2023-1001750/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1001749](https://insights.sbomify.com/GSD-2023-1001749/): btrfs: always report error in run_one_delayed_ref() (not scored)
- [GSD-2023-1001748](https://insights.sbomify.com/GSD-2023-1001748/): fbdev: omapfb: avoid stack overflow warning (not scored)
- [GSD-2023-1001747](https://insights.sbomify.com/GSD-2023-1001747/): wifi: mac80211: sdata can be NULL during AMPDU start (not scored)
- [GSD-2023-1001746](https://insights.sbomify.com/GSD-2023-1001746/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1001745](https://insights.sbomify.com/GSD-2023-1001745/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1001744](https://insights.sbomify.com/GSD-2023-1001744/): misc: fastrpc: Don't remove map on creater_process and device_release (not scored)
- [GSD-2023-1001743](https://insights.sbomify.com/GSD-2023-1001743/): misc: fastrpc: Fix use-after-free race condition for maps (not scored)
- [GSD-2023-1001742](https://insights.sbomify.com/GSD-2023-1001742/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1001741](https://insights.sbomify.com/GSD-2023-1001741/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1001740](https://insights.sbomify.com/GSD-2023-1001740/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (not scored)
- [GSD-2023-1001739](https://insights.sbomify.com/GSD-2023-1001739/): tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (not scored)
- [GSD-2023-1001738](https://insights.sbomify.com/GSD-2023-1001738/): tty: fix possible null-ptr-defer in spk_ttyio_release (not scored)
- [GSD-2023-1001737](https://insights.sbomify.com/GSD-2023-1001737/): btrfs: do not abort transaction on failure to write log tree when syncing log (not scored)
- [GSD-2023-1001736](https://insights.sbomify.com/GSD-2023-1001736/): USB: gadgetfs: Fix race between mounting and unmounting (not scored)
- [GSD-2023-1001735](https://insights.sbomify.com/GSD-2023-1001735/): dmaengine: idxd: Let probe fail when workqueue cannot be enabled (not scored)
- [GSD-2023-1001734](https://insights.sbomify.com/GSD-2023-1001734/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1001733](https://insights.sbomify.com/GSD-2023-1001733/): drm/amd/display: Calculate output_color_space after pixel encoding adjustment (not scored)
- [GSD-2023-1001732](https://insights.sbomify.com/GSD-2023-1001732/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1001731](https://insights.sbomify.com/GSD-2023-1001731/): netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (not scored)
- [GSD-2023-1001730](https://insights.sbomify.com/GSD-2023-1001730/): io_uring/poll: add hash if ready poll request can't complete inline (not scored)
- [GSD-2023-1001729](https://insights.sbomify.com/GSD-2023-1001729/): drm/i915: Fix potential context UAFs (not scored)
- [GSD-2023-1001728](https://insights.sbomify.com/GSD-2023-1001728/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1001727](https://insights.sbomify.com/GSD-2023-1001727/): s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (not scored)
- [GSD-2023-1001726](https://insights.sbomify.com/GSD-2023-1001726/): drm/amdgpu: Fixed bug on error when unloading amdgpu (not scored)
- [GSD-2023-1001725](https://insights.sbomify.com/GSD-2023-1001725/): drm/msm: another fix for the headless Adreno GPU (not scored)
- [GSD-2023-1001724](https://insights.sbomify.com/GSD-2023-1001724/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1001723](https://insights.sbomify.com/GSD-2023-1001723/): drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (not scored)
- [GSD-2023-1001722](https://insights.sbomify.com/GSD-2023-1001722/): arm64/mm: fix incorrect file_map_count for invalid pmd (not scored)
- [GSD-2023-1001721](https://insights.sbomify.com/GSD-2023-1001721/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1001720](https://insights.sbomify.com/GSD-2023-1001720/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1001719](https://insights.sbomify.com/GSD-2023-1001719/): iommu/iova: Fix alloc iova overflows issue (not scored)
- [GSD-2023-1001718](https://insights.sbomify.com/GSD-2023-1001718/): iommu/arm-smmu: Don't unregister on shutdown (not scored)
- [GSD-2023-1001717](https://insights.sbomify.com/GSD-2023-1001717/): iommu/arm-smmu-v3: Don't unregister on shutdown (not scored)
- [GSD-2023-1001716](https://insights.sbomify.com/GSD-2023-1001716/): drm/i915/gt: Cleanup partial engine discovery failures (not scored)
- [GSD-2023-1001715](https://insights.sbomify.com/GSD-2023-1001715/): sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (not scored)
- [GSD-2023-1001714](https://insights.sbomify.com/GSD-2023-1001714/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1001713](https://insights.sbomify.com/GSD-2023-1001713/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)
- [GSD-2023-1001712](https://insights.sbomify.com/GSD-2023-1001712/): x86/resctrl: Fix event counts regression in reused RMIDs (not scored)
- [GSD-2023-1001711](https://insights.sbomify.com/GSD-2023-1001711/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1001710](https://insights.sbomify.com/GSD-2023-1001710/): scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (not scored)
- [GSD-2023-1001709](https://insights.sbomify.com/GSD-2023-1001709/): ASoC: Intel: sof-nau8825: fix module alias overflow (not scored)
- [GSD-2023-1001708](https://insights.sbomify.com/GSD-2023-1001708/): nfsd: fix handling of cached open files in nfsd4_open codepath (not scored)
- [GSD-2023-1001707](https://insights.sbomify.com/GSD-2023-1001707/): drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path (not scored)
- [GSD-2023-1001706](https://insights.sbomify.com/GSD-2023-1001706/): sched/core: Fix arch_scale_freq_tick() on tickless systems (not scored)
- [GSD-2023-1001705](https://insights.sbomify.com/GSD-2023-1001705/): drm/amdgpu: Fix potential NULL dereference (not scored)
- [GSD-2023-1001704](https://insights.sbomify.com/GSD-2023-1001704/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1001703](https://insights.sbomify.com/GSD-2023-1001703/): drm/vmwgfx: Remove rcu locks from user resources (not scored)
- [GSD-2023-1001702](https://insights.sbomify.com/GSD-2023-1001702/): ice: Add check for kzalloc (not scored)
- [GSD-2023-1001701](https://insights.sbomify.com/GSD-2023-1001701/): ice: Fix potential memory leak in ice_gnss_tty_write() (not scored)
- [GSD-2023-1001700](https://insights.sbomify.com/GSD-2023-1001700/): net/mlx5: Fix command stats access after free (not scored)
- [GSD-2023-1001699](https://insights.sbomify.com/GSD-2023-1001699/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1001698](https://insights.sbomify.com/GSD-2023-1001698/): net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (not scored)
- [GSD-2023-1001697](https://insights.sbomify.com/GSD-2023-1001697/): net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (not scored)
- [GSD-2023-1001696](https://insights.sbomify.com/GSD-2023-1001696/): octeontx2-pf: Fix resource leakage in VF driver unbind (not scored)
- [GSD-2023-1001695](https://insights.sbomify.com/GSD-2023-1001695/): platform/x86/amd: Fix refcount leak in amd_pmc_probe (not scored)
- [GSD-2023-1001694](https://insights.sbomify.com/GSD-2023-1001694/): platform/surface: aggregator: Add missing call to ssam_request_sync_free() (not scored)
- [GSD-2023-1001693](https://insights.sbomify.com/GSD-2023-1001693/): ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (not scored)
- [GSD-2023-1001692](https://insights.sbomify.com/GSD-2023-1001692/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1001691](https://insights.sbomify.com/GSD-2023-1001691/): io_uring/io-wq: only free worker if it was allocated for creation (not scored)
- [GSD-2023-1001690](https://insights.sbomify.com/GSD-2023-1001690/): io_uring: lock overflowing for IOPOLL (not scored)
- [GSD-2023-1001689](https://insights.sbomify.com/GSD-2023-1001689/): Bluetooth: hci_qca: Fix driver shutdown on closed serdev (not scored)
- [GSD-2023-1001688](https://insights.sbomify.com/GSD-2023-1001688/): btrfs: always report error in run_one_delayed_ref() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/103/