# Vulnerabilities published in 2023


- [GSD-2023-1000886](https://insights.sbomify.com/GSD-2023-1000886/): vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (not scored)
- [GSD-2023-1000885](https://insights.sbomify.com/GSD-2023-1000885/): ext4: fix use-after-free in ext4_orphan_cleanup (not scored)
- [GSD-2023-1000884](https://insights.sbomify.com/GSD-2023-1000884/): ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (not scored)
- [GSD-2023-1000883](https://insights.sbomify.com/GSD-2023-1000883/): net/mlx5e: Always clear dest encap in neigh-update-del (not scored)
- [GSD-2023-1000882](https://insights.sbomify.com/GSD-2023-1000882/): ext4: fix bug_on in __es_tree_search caused by bad quota inode (not scored)
- [GSD-2023-1000881](https://insights.sbomify.com/GSD-2023-1000881/): net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (not scored)
- [GSD-2023-1000880](https://insights.sbomify.com/GSD-2023-1000880/): ext4: check and assert if marking an no_delete evicting inode dirty (not scored)
- [GSD-2023-1000879](https://insights.sbomify.com/GSD-2023-1000879/): ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (not scored)
- [GSD-2023-1000878](https://insights.sbomify.com/GSD-2023-1000878/): RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (not scored)
- [GSD-2023-1000877](https://insights.sbomify.com/GSD-2023-1000877/): gpio: sifive: Fix refcount leak in sifive_gpio_probe (not scored)
- [GSD-2023-1000876](https://insights.sbomify.com/GSD-2023-1000876/): netfilter: ipset: Rework long task execution when adding/deleting entries (not scored)
- [GSD-2023-1000875](https://insights.sbomify.com/GSD-2023-1000875/): usb: rndis_host: Secure rndis_query check against int overflow (not scored)
- [GSD-2023-1000874](https://insights.sbomify.com/GSD-2023-1000874/): perf tools: Fix resources leak in perf_data__open_dir() (not scored)
- [GSD-2023-1000873](https://insights.sbomify.com/GSD-2023-1000873/): ext4: init quota for 'old.inode' in 'ext4_rename' (not scored)
- [GSD-2023-1000872](https://insights.sbomify.com/GSD-2023-1000872/): ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (not scored)
- [GSD-2023-1000871](https://insights.sbomify.com/GSD-2023-1000871/): fs/ntfs3: don't hold ni_lock when calling truncate_setsize() (not scored)
- [GSD-2023-1000870](https://insights.sbomify.com/GSD-2023-1000870/): caif: fix memory leak in cfctrl_linkup_request() (not scored)
- [GSD-2023-1000869](https://insights.sbomify.com/GSD-2023-1000869/): ext4: fix error code return to user-space in ext4_get_branch() (not scored)
- [GSD-2023-1000868](https://insights.sbomify.com/GSD-2023-1000868/): hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (not scored)
- [GSD-2023-1000867](https://insights.sbomify.com/GSD-2023-1000867/): ext4: fix inode leak in ext4_xattr_inode_create() on an error path (not scored)
- [GSD-2023-1000866](https://insights.sbomify.com/GSD-2023-1000866/): x86/kexec: Fix double-free of elf header buffer (not scored)
- [GSD-2023-1000865](https://insights.sbomify.com/GSD-2023-1000865/): drm/i915/gvt: fix gvt debugfs destroy (not scored)
- [GSD-2023-1000864](https://insights.sbomify.com/GSD-2023-1000864/): drm/i915/gvt: fix vgpu debugfs clean in remove (not scored)
- [GSD-2023-1000863](https://insights.sbomify.com/GSD-2023-1000863/): ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob (not scored)
- [GSD-2023-1000862](https://insights.sbomify.com/GSD-2023-1000862/): net: sched: disallow noqueue for qdisc classes (not scored)
- [GSD-2023-1000861](https://insights.sbomify.com/GSD-2023-1000861/): nvme: fix multipath crash caused by flush request when blktrace is enabled (not scored)
- [GSD-2023-1000860](https://insights.sbomify.com/GSD-2023-1000860/): efi: random: combine bootloader provided RNG seed with RNG protocol output (not scored)
- [GSD-2023-1000859](https://insights.sbomify.com/GSD-2023-1000859/): ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (not scored)
- [GSD-2023-1000858](https://insights.sbomify.com/GSD-2023-1000858/): mips: ralink: mt7621: do not use kzalloc too early (not scored)
- [GSD-2023-1000857](https://insights.sbomify.com/GSD-2023-1000857/): usb: gadget: uvc: Prevent buffer overflow in setup handler (not scored)
- [GSD-2023-1000856](https://insights.sbomify.com/GSD-2023-1000856/): igb: Initialize mailbox message for VF reset (not scored)
- [GSD-2023-1000855](https://insights.sbomify.com/GSD-2023-1000855/): perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (not scored)
- [GSD-2023-1000854](https://insights.sbomify.com/GSD-2023-1000854/): arm64: mm: kfence: only handle translation faults (not scored)
- [GSD-2023-1000853](https://insights.sbomify.com/GSD-2023-1000853/): drivers: perf: marvell_cn10k: Fix hotplug callback leak in tad_pmu_init() (not scored)
- [GSD-2023-1000852](https://insights.sbomify.com/GSD-2023-1000852/): perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() (not scored)
- [GSD-2023-1000851](https://insights.sbomify.com/GSD-2023-1000851/): perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (not scored)
- [GSD-2023-1000850](https://insights.sbomify.com/GSD-2023-1000850/): pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (not scored)
- [GSD-2023-1000849](https://insights.sbomify.com/GSD-2023-1000849/): pstore/ram: Fix error return code in ramoops_probe() (not scored)
- [GSD-2023-1000848](https://insights.sbomify.com/GSD-2023-1000848/): seccomp: Move copy_seccomp() to no failure path. (not scored)
- [GSD-2023-1000847](https://insights.sbomify.com/GSD-2023-1000847/): fs: don't audit the capability check in simple_xattr_list() (not scored)
- [GSD-2023-1000846](https://insights.sbomify.com/GSD-2023-1000846/): perf: Fix possible memleak in pmu_dev_alloc() (not scored)
- [GSD-2023-1000845](https://insights.sbomify.com/GSD-2023-1000845/): lib/fonts: fix undefined behavior in bit shift for get_default_font (not scored)
- [GSD-2023-1000844](https://insights.sbomify.com/GSD-2023-1000844/): ocfs2: fix memory leak in ocfs2_stack_glue_init() (not scored)
- [GSD-2023-1000843](https://insights.sbomify.com/GSD-2023-1000843/): cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() (not scored)
- [GSD-2023-1000842](https://insights.sbomify.com/GSD-2023-1000842/): MIPS: vpe-mt: fix possible memory leak while module exiting (not scored)
- [GSD-2023-1000841](https://insights.sbomify.com/GSD-2023-1000841/): PNP: fix name memory leak in pnp_alloc_dev() (not scored)
- [GSD-2023-1000840](https://insights.sbomify.com/GSD-2023-1000840/): MIPS: vpe-cmp: fix possible memory leak while module exiting (not scored)
- [GSD-2023-1000839](https://insights.sbomify.com/GSD-2023-1000839/): perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (not scored)
- [GSD-2023-1000838](https://insights.sbomify.com/GSD-2023-1000838/): perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (not scored)
- [GSD-2023-1000837](https://insights.sbomify.com/GSD-2023-1000837/): perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (not scored)
- [GSD-2023-1000836](https://insights.sbomify.com/GSD-2023-1000836/): perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (not scored)
- [GSD-2023-1000835](https://insights.sbomify.com/GSD-2023-1000835/): platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (not scored)
- [GSD-2023-1000834](https://insights.sbomify.com/GSD-2023-1000834/): thermal: core: fix some possible name leaks in error paths (not scored)
- [GSD-2023-1000833](https://insights.sbomify.com/GSD-2023-1000833/): irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (not scored)
- [GSD-2023-1000832](https://insights.sbomify.com/GSD-2023-1000832/): EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (not scored)
- [GSD-2023-1000831](https://insights.sbomify.com/GSD-2023-1000831/): genirq/irqdesc: Don't try to remove non-existing sysfs files (not scored)
- [GSD-2023-1000830](https://insights.sbomify.com/GSD-2023-1000830/): NFSD: Finish converting the NFSv2 GETACL result encoder (not scored)
- [GSD-2023-1000829](https://insights.sbomify.com/GSD-2023-1000829/): ocfs2: fix memory leak in ocfs2_mount_volume() (not scored)
- [GSD-2023-1000828](https://insights.sbomify.com/GSD-2023-1000828/): udf: Discard preallocation before extending file with a hole (not scored)
- [GSD-2023-1000827](https://insights.sbomify.com/GSD-2023-1000827/): rapidio: fix possible name leaks when rio_add_device() fails (not scored)
- [GSD-2023-1000826](https://insights.sbomify.com/GSD-2023-1000826/): rapidio: rio: fix possible name leak in rio_register_mport() (not scored)
- [GSD-2023-1000825](https://insights.sbomify.com/GSD-2023-1000825/): udf: Fix preallocation discarding at indirect extent boundary (not scored)
- [GSD-2023-1000824](https://insights.sbomify.com/GSD-2023-1000824/): x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (not scored)
- [GSD-2023-1000823](https://insights.sbomify.com/GSD-2023-1000823/): x86/xen: Fix memory leak in xen_init_lock_cpu() (not scored)
- [GSD-2023-1000822](https://insights.sbomify.com/GSD-2023-1000822/): ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (not scored)
- [GSD-2023-1000821](https://insights.sbomify.com/GSD-2023-1000821/): udf: Fix extending file within last block (not scored)
- [GSD-2023-1000820](https://insights.sbomify.com/GSD-2023-1000820/): cifs: fix oops during encryption (not scored)
- [GSD-2023-1000819](https://insights.sbomify.com/GSD-2023-1000819/): xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (not scored)
- [GSD-2023-1000818](https://insights.sbomify.com/GSD-2023-1000818/): erofs: Fix pcluster memleak when its block address is zero (not scored)
- [GSD-2023-1000817](https://insights.sbomify.com/GSD-2023-1000817/): erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails (not scored)
- [GSD-2023-1000816](https://insights.sbomify.com/GSD-2023-1000816/): erofs: validate the extent length for uncompressed pclusters (not scored)
- [GSD-2023-1000815](https://insights.sbomify.com/GSD-2023-1000815/): platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (not scored)
- [GSD-2023-1000814](https://insights.sbomify.com/GSD-2023-1000814/): platform/chrome: cros_ec_typec: zero out stale pointers (not scored)
- [GSD-2023-1000813](https://insights.sbomify.com/GSD-2023-1000813/): hfs: Fix OOB Write in hfs_asc2mac (not scored)
- [GSD-2023-1000812](https://insights.sbomify.com/GSD-2023-1000812/): platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() (not scored)
- [GSD-2023-1000811](https://insights.sbomify.com/GSD-2023-1000811/): rapidio: fix possible UAF when kfifo_alloc() fails (not scored)
- [GSD-2023-1000810](https://insights.sbomify.com/GSD-2023-1000810/): lockd: set other missing fields when unlocking files (not scored)
- [GSD-2023-1000809](https://insights.sbomify.com/GSD-2023-1000809/): rapidio: devices: fix missing put_device in mport_cdev_open (not scored)
- [GSD-2023-1000808](https://insights.sbomify.com/GSD-2023-1000808/): wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (not scored)
- [GSD-2023-1000807](https://insights.sbomify.com/GSD-2023-1000807/): ipc: fix memory leak in init_mqueue_fs() (not scored)
- [GSD-2023-1000806](https://insights.sbomify.com/GSD-2023-1000806/): wifi: mac80211: mlme: fix null-ptr deref on failed assoc (not scored)
- [GSD-2023-1000805](https://insights.sbomify.com/GSD-2023-1000805/): wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (not scored)
- [GSD-2023-1000804](https://insights.sbomify.com/GSD-2023-1000804/): wifi: ath11k: fix firmware assert during bandwidth change for peer sta (not scored)
- [GSD-2023-1000803](https://insights.sbomify.com/GSD-2023-1000803/): libbpf: Fix use-after-free in btf_dump_name_dups (not scored)
- [GSD-2023-1000802](https://insights.sbomify.com/GSD-2023-1000802/): libbpf: Fix memory leak in parse_usdt_arg() (not scored)
- [GSD-2023-1000801](https://insights.sbomify.com/GSD-2023-1000801/): selftests/bpf: Fix memory leak caused by not destroying skeleton (not scored)
- [GSD-2023-1000800](https://insights.sbomify.com/GSD-2023-1000800/): selftest/bpf: Fix memory leak in kprobe_multi_test (not scored)
- [GSD-2023-1000799](https://insights.sbomify.com/GSD-2023-1000799/): libbpf: Use elf_getshdrnum() instead of e_shnum (not scored)
- [GSD-2023-1000798](https://insights.sbomify.com/GSD-2023-1000798/): libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() (not scored)
- [GSD-2023-1000797](https://insights.sbomify.com/GSD-2023-1000797/): ASoC: Intel: avs: Fix potential RX buffer overflow (not scored)
- [GSD-2023-1000796](https://insights.sbomify.com/GSD-2023-1000796/): drm/amdgpu/powerplay/psm: Fix memory leak in power state init (not scored)
- [GSD-2023-1000795](https://insights.sbomify.com/GSD-2023-1000795/): drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe (not scored)
- [GSD-2023-1000794](https://insights.sbomify.com/GSD-2023-1000794/): Input: iqs7222 - protect against undefined slider size (not scored)
- [GSD-2023-1000793](https://insights.sbomify.com/GSD-2023-1000793/): media: i2c: hi846: Fix memory leak in hi846_parse_dt() (not scored)
- [GSD-2023-1000792](https://insights.sbomify.com/GSD-2023-1000792/): media: i2c: ov5648: Free V4L2 fwnode data on unbind (not scored)
- [GSD-2023-1000791](https://insights.sbomify.com/GSD-2023-1000791/): drm/rockchip: lvds: fix PM usage counter unbalance in poweron (not scored)
- [GSD-2023-1000790](https://insights.sbomify.com/GSD-2023-1000790/): drm/amd/display: wait for vblank during pipe programming (not scored)
- [GSD-2023-1000789](https://insights.sbomify.com/GSD-2023-1000789/): drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (not scored)
- [GSD-2023-1000788](https://insights.sbomify.com/GSD-2023-1000788/): drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (not scored)
- [GSD-2023-1000787](https://insights.sbomify.com/GSD-2023-1000787/): bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/112/