# Vulnerabilities published in 2023


- [GSD-2023-1000586](https://insights.sbomify.com/GSD-2023-1000586/): drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (not scored)
- [GSD-2023-1000585](https://insights.sbomify.com/GSD-2023-1000585/): bpf: make sure skb->len != 0 when redirecting to a tunneling device (not scored)
- [GSD-2023-1000584](https://insights.sbomify.com/GSD-2023-1000584/): net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (not scored)
- [GSD-2023-1000583](https://insights.sbomify.com/GSD-2023-1000583/): hamradio: baycom_epp: Fix return type of baycom_send_packet() (not scored)
- [GSD-2023-1000582](https://insights.sbomify.com/GSD-2023-1000582/): wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (not scored)
- [GSD-2023-1000581](https://insights.sbomify.com/GSD-2023-1000581/): igb: Do not free q_vector unless new one was allocated (not scored)
- [GSD-2023-1000580](https://insights.sbomify.com/GSD-2023-1000580/): drm/amdgpu: Fix type of second parameter in trans_msg() callback (not scored)
- [GSD-2023-1000579](https://insights.sbomify.com/GSD-2023-1000579/): drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (not scored)
- [GSD-2023-1000578](https://insights.sbomify.com/GSD-2023-1000578/): s390/ctcm: Fix return type of ctc{mp,}m_tx() (not scored)
- [GSD-2023-1000577](https://insights.sbomify.com/GSD-2023-1000577/): s390/netiucv: Fix return type of netiucv_tx() (not scored)
- [GSD-2023-1000576](https://insights.sbomify.com/GSD-2023-1000576/): s390/lcs: Fix return type of lcs_start_xmit() (not scored)
- [GSD-2023-1000575](https://insights.sbomify.com/GSD-2023-1000575/): drm/amd/display: Disable DRR actions during state commit (not scored)
- [GSD-2023-1000574](https://insights.sbomify.com/GSD-2023-1000574/): drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (not scored)
- [GSD-2023-1000573](https://insights.sbomify.com/GSD-2023-1000573/): drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (not scored)
- [GSD-2023-1000572](https://insights.sbomify.com/GSD-2023-1000572/): md/raid0, raid10: Don't set discard sectors for request queue (not scored)
- [GSD-2023-1000571](https://insights.sbomify.com/GSD-2023-1000571/): md/raid1: stop mdx_raid1 thread when raid1 array run failed (not scored)
- [GSD-2023-1000570](https://insights.sbomify.com/GSD-2023-1000570/): drm/amd/display: fix array index out of bound error in bios parser (not scored)
- [GSD-2023-1000569](https://insights.sbomify.com/GSD-2023-1000569/): nvme-auth: don't override ctrl keys before validation (not scored)
- [GSD-2023-1000568](https://insights.sbomify.com/GSD-2023-1000568/): net: add atomic_long_t to net_device_stats fields (not scored)
- [GSD-2023-1000567](https://insights.sbomify.com/GSD-2023-1000567/): ipv6/sit: use DEV_STATS_INC() to avoid data-races (not scored)
- [GSD-2023-1000566](https://insights.sbomify.com/GSD-2023-1000566/): mrp: introduce active flags to prevent UAF when applicant uninit (not scored)
- [GSD-2023-1000565](https://insights.sbomify.com/GSD-2023-1000565/): net: ethernet: mtk_eth_soc: drop packets to WDMA if the ring is full (not scored)
- [GSD-2023-1000564](https://insights.sbomify.com/GSD-2023-1000564/): ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (not scored)
- [GSD-2023-1000563](https://insights.sbomify.com/GSD-2023-1000563/): ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove() (not scored)
- [GSD-2023-1000562](https://insights.sbomify.com/GSD-2023-1000562/): ppp: associate skb with a device at tx (not scored)
- [GSD-2023-1000561](https://insights.sbomify.com/GSD-2023-1000561/): ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (not scored)
- [GSD-2023-1000560](https://insights.sbomify.com/GSD-2023-1000560/): ASoC: rt5670: Remove unbalanced pm_runtime_put() (not scored)
- [GSD-2023-1000559](https://insights.sbomify.com/GSD-2023-1000559/): ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (not scored)
- [GSD-2023-1000558](https://insights.sbomify.com/GSD-2023-1000558/): bpf: Fix a BTF_ID_LIST bug with CONFIG_DEBUG_INFO_BTF not set (not scored)
- [GSD-2023-1000557](https://insights.sbomify.com/GSD-2023-1000557/): bpf: Prevent decl_tag from being referenced in func_proto arg (not scored)
- [GSD-2023-1000556](https://insights.sbomify.com/GSD-2023-1000556/): ethtool: avoiding integer overflow in ethtool_phys_id() (not scored)
- [GSD-2023-1000555](https://insights.sbomify.com/GSD-2023-1000555/): media: dvb-frontends: fix leak of memory fw (not scored)
- [GSD-2023-1000554](https://insights.sbomify.com/GSD-2023-1000554/): usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (not scored)
- [GSD-2023-1000553](https://insights.sbomify.com/GSD-2023-1000553/): media: dvbdev: adopts refcnt to avoid UAF (not scored)
- [GSD-2023-1000552](https://insights.sbomify.com/GSD-2023-1000552/): usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (not scored)
- [GSD-2023-1000551](https://insights.sbomify.com/GSD-2023-1000551/): 9p: set req refcount to zero to avoid uninitialized usage (not scored)
- [GSD-2023-1000550](https://insights.sbomify.com/GSD-2023-1000550/): media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (not scored)
- [GSD-2023-1000549](https://insights.sbomify.com/GSD-2023-1000549/): media: mediatek: vcodec: Can't set dst buffer to done when lat decode error (not scored)
- [GSD-2023-1000548](https://insights.sbomify.com/GSD-2023-1000548/): blk-mq: fix possible memleak when register 'hctx' failed (not scored)
- [GSD-2023-1000547](https://insights.sbomify.com/GSD-2023-1000547/): iio: fix memory leak in iio_device_register_eventset() (not scored)
- [GSD-2023-1000546](https://insights.sbomify.com/GSD-2023-1000546/): floppy: Fix memory leak in do_floppy_init() (not scored)
- [GSD-2023-1000545](https://insights.sbomify.com/GSD-2023-1000545/): drm/amd/display: Use the largest vready_offset in pipe group (not scored)
- [GSD-2023-1000544](https://insights.sbomify.com/GSD-2023-1000544/): drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (not scored)
- [GSD-2023-1000543](https://insights.sbomify.com/GSD-2023-1000543/): fbdev: fbcon: release buffer when fbcon_do_set_font() failed (not scored)
- [GSD-2023-1000542](https://insights.sbomify.com/GSD-2023-1000542/): libbpf: Avoid enum forward-declarations in public API in C++ mode (not scored)
- [GSD-2023-1000541](https://insights.sbomify.com/GSD-2023-1000541/): ovl: fix use inode directly in rcu-walk mode (not scored)
- [GSD-2023-1000540](https://insights.sbomify.com/GSD-2023-1000540/): regulator: core: fix use_count leakage when handling boot-on (not scored)
- [GSD-2023-1000539](https://insights.sbomify.com/GSD-2023-1000539/): wifi: mt76: do not run mt76u_status_worker if the device is not running (not scored)
- [GSD-2023-1000538](https://insights.sbomify.com/GSD-2023-1000538/): selftests/bpf: Fix conflicts with built-in functions in bpf_iter_ksym (not scored)
- [GSD-2023-1000537](https://insights.sbomify.com/GSD-2023-1000537/): nfs: fix possible null-ptr-deref when parsing param (not scored)
- [GSD-2023-1000536](https://insights.sbomify.com/GSD-2023-1000536/): media: si470x: Fix use-after-free in si470x_int_in_callback() (not scored)
- [GSD-2023-1000535](https://insights.sbomify.com/GSD-2023-1000535/): clk: st: Fix memory leak in st_of_quadfs_setup() (not scored)
- [GSD-2023-1000534](https://insights.sbomify.com/GSD-2023-1000534/): regulator: core: Use different devices for resource allocation and DT lookup (not scored)
- [GSD-2023-1000533](https://insights.sbomify.com/GSD-2023-1000533/): mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings (not scored)
- [GSD-2023-1000532](https://insights.sbomify.com/GSD-2023-1000532/): scsi: qla2xxx: Fix crash when I/O abort times out (not scored)
- [GSD-2023-1000531](https://insights.sbomify.com/GSD-2023-1000531/): blk-iolatency: Fix memory leak on add_disk() failures (not scored)
- [GSD-2023-1000530](https://insights.sbomify.com/GSD-2023-1000530/): crypto: hisilicon/hpre - fix resource leak in remove process (not scored)
- [GSD-2023-1000529](https://insights.sbomify.com/GSD-2023-1000529/): scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (not scored)
- [GSD-2023-1000528](https://insights.sbomify.com/GSD-2023-1000528/): net: stmmac: fix errno when create_singlethread_workqueue() fails (not scored)
- [GSD-2023-1000527](https://insights.sbomify.com/GSD-2023-1000527/): scsi: ufs: Reduce the START STOP UNIT timeout (not scored)
- [GSD-2023-1000526](https://insights.sbomify.com/GSD-2023-1000526/): media: dvbdev: fix build warning due to comments (not scored)
- [GSD-2023-1000525](https://insights.sbomify.com/GSD-2023-1000525/): media: dvbdev: fix refcnt bug (not scored)
- [GSD-2023-1000524](https://insights.sbomify.com/GSD-2023-1000524/): crypto: hisilicon/qm - increase the memory of local variables (not scored)
- [GSD-2023-1000523](https://insights.sbomify.com/GSD-2023-1000523/): scsi: elx: libefc: Fix second parameter type in state callbacks (not scored)
- [GSD-2023-1000522](https://insights.sbomify.com/GSD-2023-1000522/): hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (not scored)
- [GSD-2023-1000521](https://insights.sbomify.com/GSD-2023-1000521/): nvme-pci: fix mempool alloc size (not scored)
- [GSD-2023-1000520](https://insights.sbomify.com/GSD-2023-1000520/): scsi: smartpqi: Correct device removal for multi-actuator devices (not scored)
- [GSD-2023-1000519](https://insights.sbomify.com/GSD-2023-1000519/): drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (not scored)
- [GSD-2023-1000518](https://insights.sbomify.com/GSD-2023-1000518/): block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (not scored)
- [GSD-2023-1000517](https://insights.sbomify.com/GSD-2023-1000517/): drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (not scored)
- [GSD-2023-1000516](https://insights.sbomify.com/GSD-2023-1000516/): scsi: target: iscsi: Fix a race condition between login_work and the login thread (not scored)
- [GSD-2023-1000515](https://insights.sbomify.com/GSD-2023-1000515/): orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (not scored)
- [GSD-2023-1000514](https://insights.sbomify.com/GSD-2023-1000514/): orangefs: Fix kmemleak in orangefs_sysfs_init() (not scored)
- [GSD-2023-1000513](https://insights.sbomify.com/GSD-2023-1000513/): orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (not scored)
- [GSD-2023-1000512](https://insights.sbomify.com/GSD-2023-1000512/): security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (not scored)
- [GSD-2023-1000511](https://insights.sbomify.com/GSD-2023-1000511/): btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (not scored)
- [GSD-2023-1000510](https://insights.sbomify.com/GSD-2023-1000510/): futex: Fix futex_waitv() hrtimer debug object leak on kcalloc error (not scored)
- [GSD-2023-1000509](https://insights.sbomify.com/GSD-2023-1000509/): mm/mempolicy: fix memory leak in set_mempolicy_home_node system call (not scored)
- [GSD-2023-1000508](https://insights.sbomify.com/GSD-2023-1000508/): pnode: terminate at peers of source (not scored)
- [GSD-2023-1000507](https://insights.sbomify.com/GSD-2023-1000507/): pstore/zone: Use GFP_ATOMIC to allocate zone buffer (not scored)
- [GSD-2023-1000506](https://insights.sbomify.com/GSD-2023-1000506/): mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (not scored)
- [GSD-2023-1000505](https://insights.sbomify.com/GSD-2023-1000505/): mm, compaction: fix fast_isolate_around() to stay within boundaries (not scored)
- [GSD-2023-1000504](https://insights.sbomify.com/GSD-2023-1000504/): tpm: acpi: Call acpi_put_table() to fix memory leak (not scored)
- [GSD-2023-1000503](https://insights.sbomify.com/GSD-2023-1000503/): tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (not scored)
- [GSD-2023-1000502](https://insights.sbomify.com/GSD-2023-1000502/): tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (not scored)
- [GSD-2023-1000501](https://insights.sbomify.com/GSD-2023-1000501/): SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (not scored)
- [GSD-2023-1000500](https://insights.sbomify.com/GSD-2023-1000500/): eventpoll: add EPOLL_URING_WAKE poll wakeup flag (not scored)
- [GSD-2023-1000499](https://insights.sbomify.com/GSD-2023-1000499/): eventfd: provide a eventfd_signal_mask() helper (not scored)
- [GSD-2023-1000498](https://insights.sbomify.com/GSD-2023-1000498/): arm64: dts: qcom: sc8280xp: fix UFS DMA coherency (not scored)
- [GSD-2023-1000497](https://insights.sbomify.com/GSD-2023-1000497/): fs/ntfs3: Validate BOOT record_size (not scored)
- [GSD-2023-1000496](https://insights.sbomify.com/GSD-2023-1000496/): btrfs: fix extent map use-after-free when handling missing device in read_one_chunk (not scored)
- [GSD-2023-1000495](https://insights.sbomify.com/GSD-2023-1000495/): phy: qcom-qmp-combo: fix out-of-bounds clock access (not scored)
- [GSD-2023-1000494](https://insights.sbomify.com/GSD-2023-1000494/): fs/ntfs3: Add overflow check for attribute size (not scored)
- [GSD-2023-1000493](https://insights.sbomify.com/GSD-2023-1000493/): fs/ntfs3: Validate data run offset (not scored)
- [GSD-2023-1000492](https://insights.sbomify.com/GSD-2023-1000492/): x86/MCE/AMD: Clear DFR errors found in THR handler (not scored)
- [GSD-2023-1000491](https://insights.sbomify.com/GSD-2023-1000491/): fs/ntfs3: Add null pointer check to attr_load_runs_vcn (not scored)
- [GSD-2023-1000490](https://insights.sbomify.com/GSD-2023-1000490/): fs/ntfs3: Fix memory leak on ntfs_fill_super() error path (not scored)
- [GSD-2023-1000489](https://insights.sbomify.com/GSD-2023-1000489/): cpufreq: Init completion before kobject_init_and_add() (not scored)
- [GSD-2023-1000488](https://insights.sbomify.com/GSD-2023-1000488/): media: s5p-mfc: Clear workbit to handle error condition (not scored)
- [GSD-2023-1000487](https://insights.sbomify.com/GSD-2023-1000487/): ext2: unbugger ext2_empty_dir() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/115/