# Vulnerabilities published in 2023


- [GSD-2023-1000986](https://insights.sbomify.com/GSD-2023-1000986/): 9p: set req refcount to zero to avoid uninitialized usage (not scored)
- [GSD-2023-1000985](https://insights.sbomify.com/GSD-2023-1000985/): drm/amd/display: Use the largest vready_offset in pipe group (not scored)
- [GSD-2023-1000984](https://insights.sbomify.com/GSD-2023-1000984/): iio: fix memory leak in iio_device_register_eventset() (not scored)
- [GSD-2023-1000983](https://insights.sbomify.com/GSD-2023-1000983/): libbpf: Avoid enum forward-declarations in public API in C++ mode (not scored)
- [GSD-2023-1000982](https://insights.sbomify.com/GSD-2023-1000982/): floppy: Fix memory leak in do_floppy_init() (not scored)
- [GSD-2023-1000981](https://insights.sbomify.com/GSD-2023-1000981/): regulator: core: fix use_count leakage when handling boot-on (not scored)
- [GSD-2023-1000980](https://insights.sbomify.com/GSD-2023-1000980/): wifi: mt76: do not run mt76u_status_worker if the device is not running (not scored)
- [GSD-2023-1000979](https://insights.sbomify.com/GSD-2023-1000979/): ovl: fix use inode directly in rcu-walk mode (not scored)
- [GSD-2023-1000978](https://insights.sbomify.com/GSD-2023-1000978/): fbdev: fbcon: release buffer when fbcon_do_set_font() failed (not scored)
- [GSD-2023-1000977](https://insights.sbomify.com/GSD-2023-1000977/): scsi: qla2xxx: Fix crash when I/O abort times out (not scored)
- [GSD-2023-1000976](https://insights.sbomify.com/GSD-2023-1000976/): media: si470x: Fix use-after-free in si470x_int_in_callback() (not scored)
- [GSD-2023-1000975](https://insights.sbomify.com/GSD-2023-1000975/): clk: st: Fix memory leak in st_of_quadfs_setup() (not scored)
- [GSD-2023-1000974](https://insights.sbomify.com/GSD-2023-1000974/): net: stmmac: fix errno when create_singlethread_workqueue() fails (not scored)
- [GSD-2023-1000973](https://insights.sbomify.com/GSD-2023-1000973/): media: dvbdev: fix build warning due to comments (not scored)
- [GSD-2023-1000972](https://insights.sbomify.com/GSD-2023-1000972/): media: dvbdev: fix refcnt bug (not scored)
- [GSD-2023-1000971](https://insights.sbomify.com/GSD-2023-1000971/): crypto: hisilicon/hpre - fix resource leak in remove process (not scored)
- [GSD-2023-1000970](https://insights.sbomify.com/GSD-2023-1000970/): scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (not scored)
- [GSD-2023-1000969](https://insights.sbomify.com/GSD-2023-1000969/): scsi: ufs: Reduce the START STOP UNIT timeout (not scored)
- [GSD-2023-1000968](https://insights.sbomify.com/GSD-2023-1000968/): nvme-pci: fix mempool alloc size (not scored)
- [GSD-2023-1000967](https://insights.sbomify.com/GSD-2023-1000967/): scsi: elx: libefc: Fix second parameter type in state callbacks (not scored)
- [GSD-2023-1000966](https://insights.sbomify.com/GSD-2023-1000966/): block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (not scored)
- [GSD-2023-1000965](https://insights.sbomify.com/GSD-2023-1000965/): hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (not scored)
- [GSD-2023-1000964](https://insights.sbomify.com/GSD-2023-1000964/): drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (not scored)
- [GSD-2023-1000963](https://insights.sbomify.com/GSD-2023-1000963/): drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (not scored)
- [GSD-2023-1000962](https://insights.sbomify.com/GSD-2023-1000962/): orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (not scored)
- [GSD-2023-1000961](https://insights.sbomify.com/GSD-2023-1000961/): orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (not scored)
- [GSD-2023-1000960](https://insights.sbomify.com/GSD-2023-1000960/): security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (not scored)
- [GSD-2023-1000959](https://insights.sbomify.com/GSD-2023-1000959/): btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (not scored)
- [GSD-2023-1000958](https://insights.sbomify.com/GSD-2023-1000958/): pnode: terminate at peers of source (not scored)
- [GSD-2023-1000957](https://insights.sbomify.com/GSD-2023-1000957/): pstore/zone: Use GFP_ATOMIC to allocate zone buffer (not scored)
- [GSD-2023-1000956](https://insights.sbomify.com/GSD-2023-1000956/): mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (not scored)
- [GSD-2023-1000955](https://insights.sbomify.com/GSD-2023-1000955/): mm, compaction: fix fast_isolate_around() to stay within boundaries (not scored)
- [GSD-2023-1000954](https://insights.sbomify.com/GSD-2023-1000954/): tpm: acpi: Call acpi_put_table() to fix memory leak (not scored)
- [GSD-2023-1000953](https://insights.sbomify.com/GSD-2023-1000953/): tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (not scored)
- [GSD-2023-1000952](https://insights.sbomify.com/GSD-2023-1000952/): SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (not scored)
- [GSD-2023-1000951](https://insights.sbomify.com/GSD-2023-1000951/): tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (not scored)
- [GSD-2023-1000950](https://insights.sbomify.com/GSD-2023-1000950/): fs/ntfs3: Validate BOOT record_size (not scored)
- [GSD-2023-1000949](https://insights.sbomify.com/GSD-2023-1000949/): phy: qcom-qmp-combo: fix out-of-bounds clock access (not scored)
- [GSD-2023-1000948](https://insights.sbomify.com/GSD-2023-1000948/): fs/ntfs3: Add overflow check for attribute size (not scored)
- [GSD-2023-1000947](https://insights.sbomify.com/GSD-2023-1000947/): btrfs: fix extent map use-after-free when handling missing device in read_one_chunk (not scored)
- [GSD-2023-1000946](https://insights.sbomify.com/GSD-2023-1000946/): fs/ntfs3: Validate data run offset (not scored)
- [GSD-2023-1000945](https://insights.sbomify.com/GSD-2023-1000945/): fs/ntfs3: Add null pointer check to attr_load_runs_vcn (not scored)
- [GSD-2023-1000944](https://insights.sbomify.com/GSD-2023-1000944/): x86/MCE/AMD: Clear DFR errors found in THR handler (not scored)
- [GSD-2023-1000943](https://insights.sbomify.com/GSD-2023-1000943/): fs/ntfs3: Fix memory leak on ntfs_fill_super() error path (not scored)
- [GSD-2023-1000942](https://insights.sbomify.com/GSD-2023-1000942/): fs/ntfs3: Add null pointer check for inode operations (not scored)
- [GSD-2023-1000941](https://insights.sbomify.com/GSD-2023-1000941/): cpufreq: Init completion before kobject_init_and_add() (not scored)
- [GSD-2023-1000940](https://insights.sbomify.com/GSD-2023-1000940/): fs/ntfs3: Validate attribute name offset (not scored)
- [GSD-2023-1000939](https://insights.sbomify.com/GSD-2023-1000939/): media: s5p-mfc: Clear workbit to handle error condition (not scored)
- [GSD-2023-1000938](https://insights.sbomify.com/GSD-2023-1000938/): fs/ntfs3: Validate buffer length while parsing index (not scored)
- [GSD-2023-1000937](https://insights.sbomify.com/GSD-2023-1000937/): dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (not scored)
- [GSD-2023-1000936](https://insights.sbomify.com/GSD-2023-1000936/): fs/ntfs3: Validate resident attribute name (not scored)
- [GSD-2023-1000935](https://insights.sbomify.com/GSD-2023-1000935/): dm thin: Use last transaction's pmd->root when commit failed (not scored)
- [GSD-2023-1000934](https://insights.sbomify.com/GSD-2023-1000934/): mptcp: use proper req destructor for IPv6 (not scored)
- [GSD-2023-1000933](https://insights.sbomify.com/GSD-2023-1000933/): fs/ntfs3: Fix slab-out-of-bounds read in run_unpack (not scored)
- [GSD-2023-1000932](https://insights.sbomify.com/GSD-2023-1000932/): dm thin: Fix UAF in run_timer_softirq() (not scored)
- [GSD-2023-1000931](https://insights.sbomify.com/GSD-2023-1000931/): fs/ntfs3: Validate index root when initialize NTFS security (not scored)
- [GSD-2023-1000930](https://insights.sbomify.com/GSD-2023-1000930/): fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() (not scored)
- [GSD-2023-1000929](https://insights.sbomify.com/GSD-2023-1000929/): fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() (not scored)
- [GSD-2023-1000928](https://insights.sbomify.com/GSD-2023-1000928/): dm integrity: Fix UAF in dm_integrity_dtr() (not scored)
- [GSD-2023-1000927](https://insights.sbomify.com/GSD-2023-1000927/): fs/ntfs3: Delete duplicate condition in ntfs_read_mft() (not scored)
- [GSD-2023-1000926](https://insights.sbomify.com/GSD-2023-1000926/): dm cache: Fix UAF in destroy() (not scored)
- [GSD-2023-1000925](https://insights.sbomify.com/GSD-2023-1000925/): dm clone: Fix UAF in clone_dtr() (not scored)
- [GSD-2023-1000924](https://insights.sbomify.com/GSD-2023-1000924/): fs/ntfs3: Fix slab-out-of-bounds in r_page (not scored)
- [GSD-2023-1000923](https://insights.sbomify.com/GSD-2023-1000923/): objtool: Fix SEGFAULT (not scored)
- [GSD-2023-1000922](https://insights.sbomify.com/GSD-2023-1000922/): tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (not scored)
- [GSD-2023-1000921](https://insights.sbomify.com/GSD-2023-1000921/): tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (not scored)
- [GSD-2023-1000920](https://insights.sbomify.com/GSD-2023-1000920/): powerpc/rtas: avoid device tree lookups in rtas_os_term() (not scored)
- [GSD-2023-1000919](https://insights.sbomify.com/GSD-2023-1000919/): tracing: Fix race where eprobes can be called before the event (not scored)
- [GSD-2023-1000918](https://insights.sbomify.com/GSD-2023-1000918/): powerpc/rtas: avoid scheduling in rtas_os_term() (not scored)
- [GSD-2023-1000917](https://insights.sbomify.com/GSD-2023-1000917/): staging: media: tegra-video: fix device_node use after free (not scored)
- [GSD-2023-1000916](https://insights.sbomify.com/GSD-2023-1000916/): media: dvb-core: Fix double free in dvb_register_device() (not scored)
- [GSD-2023-1000915](https://insights.sbomify.com/GSD-2023-1000915/): ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (not scored)
- [GSD-2023-1000914](https://insights.sbomify.com/GSD-2023-1000914/): ALSA: line6: fix stack overflow in line6_midi_transmit (not scored)
- [GSD-2023-1000913](https://insights.sbomify.com/GSD-2023-1000913/): ipmi: fix use after free in _ipmi_destroy_user() (not scored)
- [GSD-2023-1000912](https://insights.sbomify.com/GSD-2023-1000912/): md: fix a crash in mempool_free (not scored)
- [GSD-2023-1000911](https://insights.sbomify.com/GSD-2023-1000911/): PCI/sysfs: Fix double free in error path (not scored)
- [GSD-2023-1000910](https://insights.sbomify.com/GSD-2023-1000910/): parisc: led: Fix potential null-ptr-deref in start_task() (not scored)
- [GSD-2023-1000909](https://insights.sbomify.com/GSD-2023-1000909/): drm/vmwgfx: Validate the box size for the snooped cursor (not scored)
- [GSD-2023-1000908](https://insights.sbomify.com/GSD-2023-1000908/): ext4: silence the warning when evicting inode with dioread_nolock (not scored)
- [GSD-2023-1000907](https://insights.sbomify.com/GSD-2023-1000907/): fs: ext4: initialize fsdata in pagecache_write() (not scored)
- [GSD-2023-1000906](https://insights.sbomify.com/GSD-2023-1000906/): ext4: fix undefined behavior in bit shift for ext4_check_flag_values (not scored)
- [GSD-2023-1000905](https://insights.sbomify.com/GSD-2023-1000905/): btrfs: fix resolving backrefs for inline extent followed by prealloc (not scored)
- [GSD-2023-1000904](https://insights.sbomify.com/GSD-2023-1000904/): ext4: fix reserved cluster accounting in __es_remove_extent() (not scored)
- [GSD-2023-1000903](https://insights.sbomify.com/GSD-2023-1000903/): ext4: disable fast-commit of encrypted dir operations (not scored)
- [GSD-2023-1000902](https://insights.sbomify.com/GSD-2023-1000902/): ext4: fix leaking uninitialized memory in fast-commit journal (not scored)
- [GSD-2023-1000901](https://insights.sbomify.com/GSD-2023-1000901/): ext4: don't set up encryption key during jbd2 transaction (not scored)
- [GSD-2023-1000900](https://insights.sbomify.com/GSD-2023-1000900/): ext4: fix off-by-one errors in fast-commit block filling (not scored)
- [GSD-2023-1000899](https://insights.sbomify.com/GSD-2023-1000899/): ext4: fix uninititialized value in 'ext4_evict_inode' (not scored)
- [GSD-2023-1000898](https://insights.sbomify.com/GSD-2023-1000898/): ext4: fix corruption when online resizing a 1K bigalloc fs (not scored)
- [GSD-2023-1000897](https://insights.sbomify.com/GSD-2023-1000897/): ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (not scored)
- [GSD-2023-1000896](https://insights.sbomify.com/GSD-2023-1000896/): ext4: fix deadlock due to mbcache entry corruption (not scored)
- [GSD-2023-1000895](https://insights.sbomify.com/GSD-2023-1000895/): ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (not scored)
- [GSD-2023-1000894](https://insights.sbomify.com/GSD-2023-1000894/): media: dvb-core: Fix UAF due to refcount races at releasing (not scored)
- [GSD-2023-1000893](https://insights.sbomify.com/GSD-2023-1000893/): md/bitmap: Fix bitmap chunk size overflow issues (not scored)
- [GSD-2023-1000892](https://insights.sbomify.com/GSD-2023-1000892/): drm/panfrost: Fix GEM handle creation ref-counting (not scored)
- [GSD-2023-1000891](https://insights.sbomify.com/GSD-2023-1000891/): PCI: Fix pci_device_is_present() for VFs by checking PF (not scored)
- [GSD-2023-1000890](https://insights.sbomify.com/GSD-2023-1000890/): net: sched: fix memory leak in tcindex_set_parms (not scored)
- [GSD-2023-1000889](https://insights.sbomify.com/GSD-2023-1000889/): net: hns3: fix VF promisc mode not update when mac table full (not scored)
- [GSD-2023-1000888](https://insights.sbomify.com/GSD-2023-1000888/): qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (not scored)
- [GSD-2023-1000887](https://insights.sbomify.com/GSD-2023-1000887/): nfc: Fix potential resource leaks (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/111/