# Vulnerabilities published in 2023


- [GSD-2023-1001286](https://insights.sbomify.com/GSD-2023-1001286/): dm thin: Fix UAF in run_timer_softirq() (not scored)
- [GSD-2023-1001285](https://insights.sbomify.com/GSD-2023-1001285/): objtool: Fix SEGFAULT (not scored)
- [GSD-2023-1001284](https://insights.sbomify.com/GSD-2023-1001284/): dm integrity: Fix UAF in dm_integrity_dtr() (not scored)
- [GSD-2023-1001283](https://insights.sbomify.com/GSD-2023-1001283/): dm cache: Fix UAF in destroy() (not scored)
- [GSD-2023-1001282](https://insights.sbomify.com/GSD-2023-1001282/): powerpc/rtas: avoid device tree lookups in rtas_os_term() (not scored)
- [GSD-2023-1001281](https://insights.sbomify.com/GSD-2023-1001281/): powerpc/rtas: avoid scheduling in rtas_os_term() (not scored)
- [GSD-2023-1001280](https://insights.sbomify.com/GSD-2023-1001280/): dm clone: Fix UAF in clone_dtr() (not scored)
- [GSD-2023-1001279](https://insights.sbomify.com/GSD-2023-1001279/): tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (not scored)
- [GSD-2023-1001278](https://insights.sbomify.com/GSD-2023-1001278/): tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (not scored)
- [GSD-2023-1001277](https://insights.sbomify.com/GSD-2023-1001277/): staging: media: tegra-video: fix device_node use after free (not scored)
- [GSD-2023-1001276](https://insights.sbomify.com/GSD-2023-1001276/): media: dvb-core: Fix double free in dvb_register_device() (not scored)
- [GSD-2023-1001275](https://insights.sbomify.com/GSD-2023-1001275/): ALSA: line6: fix stack overflow in line6_midi_transmit (not scored)
- [GSD-2023-1001274](https://insights.sbomify.com/GSD-2023-1001274/): md: fix a crash in mempool_free (not scored)
- [GSD-2023-1001273](https://insights.sbomify.com/GSD-2023-1001273/): ipmi: fix use after free in _ipmi_destroy_user() (not scored)
- [GSD-2023-1001272](https://insights.sbomify.com/GSD-2023-1001272/): PCI/sysfs: Fix double free in error path (not scored)
- [GSD-2023-1001271](https://insights.sbomify.com/GSD-2023-1001271/): parisc: led: Fix potential null-ptr-deref in start_task() (not scored)
- [GSD-2023-1001270](https://insights.sbomify.com/GSD-2023-1001270/): drm/vmwgfx: Validate the box size for the snooped cursor (not scored)
- [GSD-2023-1001269](https://insights.sbomify.com/GSD-2023-1001269/): btrfs: fix resolving backrefs for inline extent followed by prealloc (not scored)
- [GSD-2023-1001268](https://insights.sbomify.com/GSD-2023-1001268/): ext4: silence the warning when evicting inode with dioread_nolock (not scored)
- [GSD-2023-1001267](https://insights.sbomify.com/GSD-2023-1001267/): fs: ext4: initialize fsdata in pagecache_write() (not scored)
- [GSD-2023-1001266](https://insights.sbomify.com/GSD-2023-1001266/): ext4: fix undefined behavior in bit shift for ext4_check_flag_values (not scored)
- [GSD-2023-1001265](https://insights.sbomify.com/GSD-2023-1001265/): ext4: fix reserved cluster accounting in __es_remove_extent() (not scored)
- [GSD-2023-1001264](https://insights.sbomify.com/GSD-2023-1001264/): ext4: disable fast-commit of encrypted dir operations (not scored)
- [GSD-2023-1001263](https://insights.sbomify.com/GSD-2023-1001263/): ext4: fix leaking uninitialized memory in fast-commit journal (not scored)
- [GSD-2023-1001262](https://insights.sbomify.com/GSD-2023-1001262/): ext4: don't set up encryption key during jbd2 transaction (not scored)
- [GSD-2023-1001261](https://insights.sbomify.com/GSD-2023-1001261/): ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (not scored)
- [GSD-2023-1001260](https://insights.sbomify.com/GSD-2023-1001260/): ext4: fix corruption when online resizing a 1K bigalloc fs (not scored)
- [GSD-2023-1001259](https://insights.sbomify.com/GSD-2023-1001259/): media: dvb-core: Fix UAF due to refcount races at releasing (not scored)
- [GSD-2023-1001258](https://insights.sbomify.com/GSD-2023-1001258/): md/bitmap: Fix bitmap chunk size overflow issues (not scored)
- [GSD-2023-1001257](https://insights.sbomify.com/GSD-2023-1001257/): ext4: fix deadlock due to mbcache entry corruption (not scored)
- [GSD-2023-1001256](https://insights.sbomify.com/GSD-2023-1001256/): PCI: Fix pci_device_is_present() for VFs by checking PF (not scored)
- [GSD-2023-1001255](https://insights.sbomify.com/GSD-2023-1001255/): drm/panfrost: Fix GEM handle creation ref-counting (not scored)
- [GSD-2023-1001254](https://insights.sbomify.com/GSD-2023-1001254/): net: sched: fix memory leak in tcindex_set_parms (not scored)
- [GSD-2023-1001253](https://insights.sbomify.com/GSD-2023-1001253/): qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (not scored)
- [GSD-2023-1001252](https://insights.sbomify.com/GSD-2023-1001252/): nfc: Fix potential resource leaks (not scored)
- [GSD-2023-1001251](https://insights.sbomify.com/GSD-2023-1001251/): ext4: fix use-after-free in ext4_orphan_cleanup (not scored)
- [GSD-2023-1001250](https://insights.sbomify.com/GSD-2023-1001250/): ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (not scored)
- [GSD-2023-1001249](https://insights.sbomify.com/GSD-2023-1001249/): ext4: fix bug_on in __es_tree_search caused by bad quota inode (not scored)
- [GSD-2023-1001248](https://insights.sbomify.com/GSD-2023-1001248/): ext4: check and assert if marking an no_delete evicting inode dirty (not scored)
- [GSD-2023-1001247](https://insights.sbomify.com/GSD-2023-1001247/): ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (not scored)
- [GSD-2023-1001246](https://insights.sbomify.com/GSD-2023-1001246/): net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (not scored)
- [GSD-2023-1001245](https://insights.sbomify.com/GSD-2023-1001245/): gpio: sifive: Fix refcount leak in sifive_gpio_probe (not scored)
- [GSD-2023-1001244](https://insights.sbomify.com/GSD-2023-1001244/): ext4: init quota for 'old.inode' in 'ext4_rename' (not scored)
- [GSD-2023-1001243](https://insights.sbomify.com/GSD-2023-1001243/): ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (not scored)
- [GSD-2023-1001242](https://insights.sbomify.com/GSD-2023-1001242/): netfilter: ipset: Rework long task execution when adding/deleting entries (not scored)
- [GSD-2023-1001241](https://insights.sbomify.com/GSD-2023-1001241/): usb: rndis_host: Secure rndis_query check against int overflow (not scored)
- [GSD-2023-1001240](https://insights.sbomify.com/GSD-2023-1001240/): perf tools: Fix resources leak in perf_data__open_dir() (not scored)
- [GSD-2023-1001239](https://insights.sbomify.com/GSD-2023-1001239/): ext4: fix error code return to user-space in ext4_get_branch() (not scored)
- [GSD-2023-1001238](https://insights.sbomify.com/GSD-2023-1001238/): caif: fix memory leak in cfctrl_linkup_request() (not scored)
- [GSD-2023-1001237](https://insights.sbomify.com/GSD-2023-1001237/): ext4: fix inode leak in ext4_xattr_inode_create() on an error path (not scored)
- [GSD-2023-1001236](https://insights.sbomify.com/GSD-2023-1001236/): hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (not scored)
- [GSD-2023-1001235](https://insights.sbomify.com/GSD-2023-1001235/): drm/i915/gvt: fix gvt debugfs destroy (not scored)
- [GSD-2023-1001234](https://insights.sbomify.com/GSD-2023-1001234/): drm/i915/gvt: fix vgpu debugfs clean in remove (not scored)
- [GSD-2023-1001233](https://insights.sbomify.com/GSD-2023-1001233/): net: sched: disallow noqueue for qdisc classes (not scored)
- [GSD-2023-1001232](https://insights.sbomify.com/GSD-2023-1001232/): nvme: fix multipath crash caused by flush request when blktrace is enabled (not scored)
- [GSD-2023-1001231](https://insights.sbomify.com/GSD-2023-1001231/): efi: random: combine bootloader provided RNG seed with RNG protocol output (not scored)
- [GSD-2023-1001230](https://insights.sbomify.com/GSD-2023-1001230/): ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (not scored)
- [GSD-2023-1001229](https://insights.sbomify.com/GSD-2023-1001229/): mips: ralink: mt7621: do not use kzalloc too early (not scored)
- [GSD-2023-1001228](https://insights.sbomify.com/GSD-2023-1001228/): usb: gadget: uvc: Prevent buffer overflow in setup handler (not scored)
- [GSD-2023-1001227](https://insights.sbomify.com/GSD-2023-1001227/): igb: Initialize mailbox message for VF reset (not scored)
- [GSD-2023-1001226](https://insights.sbomify.com/GSD-2023-1001226/): arm64: mm: kfence: only handle translation faults (not scored)
- [GSD-2023-1001225](https://insights.sbomify.com/GSD-2023-1001225/): perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (not scored)
- [GSD-2023-1001224](https://insights.sbomify.com/GSD-2023-1001224/): perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (not scored)
- [GSD-2023-1001223](https://insights.sbomify.com/GSD-2023-1001223/): perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (not scored)
- [GSD-2023-1001222](https://insights.sbomify.com/GSD-2023-1001222/): pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (not scored)
- [GSD-2023-1001221](https://insights.sbomify.com/GSD-2023-1001221/): pstore/ram: Fix error return code in ramoops_probe() (not scored)
- [GSD-2023-1001220](https://insights.sbomify.com/GSD-2023-1001220/): seccomp: Move copy_seccomp() to no failure path. (not scored)
- [GSD-2023-1001219](https://insights.sbomify.com/GSD-2023-1001219/): fs: don't audit the capability check in simple_xattr_list() (not scored)
- [GSD-2023-1001218](https://insights.sbomify.com/GSD-2023-1001218/): perf: Fix possible memleak in pmu_dev_alloc() (not scored)
- [GSD-2023-1001217](https://insights.sbomify.com/GSD-2023-1001217/): lib/fonts: fix undefined behavior in bit shift for get_default_font (not scored)
- [GSD-2023-1001216](https://insights.sbomify.com/GSD-2023-1001216/): cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (not scored)
- [GSD-2023-1001215](https://insights.sbomify.com/GSD-2023-1001215/): ocfs2: fix memory leak in ocfs2_stack_glue_init() (not scored)
- [GSD-2023-1001214](https://insights.sbomify.com/GSD-2023-1001214/): MIPS: vpe-mt: fix possible memory leak while module exiting (not scored)
- [GSD-2023-1001213](https://insights.sbomify.com/GSD-2023-1001213/): MIPS: vpe-cmp: fix possible memory leak while module exiting (not scored)
- [GSD-2023-1001212](https://insights.sbomify.com/GSD-2023-1001212/): PNP: fix name memory leak in pnp_alloc_dev() (not scored)
- [GSD-2023-1001211](https://insights.sbomify.com/GSD-2023-1001211/): perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (not scored)
- [GSD-2023-1001210](https://insights.sbomify.com/GSD-2023-1001210/): perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (not scored)
- [GSD-2023-1001209](https://insights.sbomify.com/GSD-2023-1001209/): perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (not scored)
- [GSD-2023-1001208](https://insights.sbomify.com/GSD-2023-1001208/): perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (not scored)
- [GSD-2023-1001207](https://insights.sbomify.com/GSD-2023-1001207/): platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (not scored)
- [GSD-2023-1001206](https://insights.sbomify.com/GSD-2023-1001206/): thermal: core: fix some possible name leaks in error paths (not scored)
- [GSD-2023-1001205](https://insights.sbomify.com/GSD-2023-1001205/): irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (not scored)
- [GSD-2023-1001204](https://insights.sbomify.com/GSD-2023-1001204/): EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (not scored)
- [GSD-2023-1001203](https://insights.sbomify.com/GSD-2023-1001203/): genirq/irqdesc: Don't try to remove non-existing sysfs files (not scored)
- [GSD-2023-1001202](https://insights.sbomify.com/GSD-2023-1001202/): NFSD: Finish converting the NFSv2 GETACL result encoder (not scored)
- [GSD-2023-1001201](https://insights.sbomify.com/GSD-2023-1001201/): rapidio: fix possible name leaks when rio_add_device() fails (not scored)
- [GSD-2023-1001200](https://insights.sbomify.com/GSD-2023-1001200/): rapidio: rio: fix possible name leak in rio_register_mport() (not scored)
- [GSD-2023-1001199](https://insights.sbomify.com/GSD-2023-1001199/): udf: Discard preallocation before extending file with a hole (not scored)
- [GSD-2023-1001198](https://insights.sbomify.com/GSD-2023-1001198/): ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (not scored)
- [GSD-2023-1001197](https://insights.sbomify.com/GSD-2023-1001197/): x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (not scored)
- [GSD-2023-1001196](https://insights.sbomify.com/GSD-2023-1001196/): udf: Fix preallocation discarding at indirect extent boundary (not scored)
- [GSD-2023-1001195](https://insights.sbomify.com/GSD-2023-1001195/): x86/xen: Fix memory leak in xen_init_lock_cpu() (not scored)
- [GSD-2023-1001194](https://insights.sbomify.com/GSD-2023-1001194/): udf: Fix extending file within last block (not scored)
- [GSD-2023-1001193](https://insights.sbomify.com/GSD-2023-1001193/): cifs: fix oops during encryption (not scored)
- [GSD-2023-1001192](https://insights.sbomify.com/GSD-2023-1001192/): xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (not scored)
- [GSD-2023-1001191](https://insights.sbomify.com/GSD-2023-1001191/): platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (not scored)
- [GSD-2023-1001190](https://insights.sbomify.com/GSD-2023-1001190/): platform/chrome: cros_ec_typec: zero out stale pointers (not scored)
- [GSD-2023-1001189](https://insights.sbomify.com/GSD-2023-1001189/): hfs: Fix OOB Write in hfs_asc2mac (not scored)
- [GSD-2023-1001188](https://insights.sbomify.com/GSD-2023-1001188/): platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (not scored)
- [GSD-2023-1001187](https://insights.sbomify.com/GSD-2023-1001187/): rapidio: fix possible UAF when kfifo_alloc() fails (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/108/