# Vulnerabilities published in 2023


- [GSD-2023-1000486](https://insights.sbomify.com/GSD-2023-1000486/): dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (not scored)
- [GSD-2023-1000485](https://insights.sbomify.com/GSD-2023-1000485/): dm thin: Use last transaction's pmd->root when commit failed (not scored)
- [GSD-2023-1000484](https://insights.sbomify.com/GSD-2023-1000484/): mptcp: use proper req destructor for IPv6 (not scored)
- [GSD-2023-1000483](https://insights.sbomify.com/GSD-2023-1000483/): fs/ntfs3: Add null pointer check for inode operations (not scored)
- [GSD-2023-1000482](https://insights.sbomify.com/GSD-2023-1000482/): dm thin: Fix UAF in run_timer_softirq() (not scored)
- [GSD-2023-1000481](https://insights.sbomify.com/GSD-2023-1000481/): fs/ntfs3: Validate attribute name offset (not scored)
- [GSD-2023-1000480](https://insights.sbomify.com/GSD-2023-1000480/): fs/ntfs3: Validate buffer length while parsing index (not scored)
- [GSD-2023-1000479](https://insights.sbomify.com/GSD-2023-1000479/): fs/ntfs3: Validate resident attribute name (not scored)
- [GSD-2023-1000478](https://insights.sbomify.com/GSD-2023-1000478/): dm integrity: Fix UAF in dm_integrity_dtr() (not scored)
- [GSD-2023-1000477](https://insights.sbomify.com/GSD-2023-1000477/): dm cache: Fix UAF in destroy() (not scored)
- [GSD-2023-1000476](https://insights.sbomify.com/GSD-2023-1000476/): fs/ntfs3: Fix slab-out-of-bounds read in run_unpack (not scored)
- [GSD-2023-1000475](https://insights.sbomify.com/GSD-2023-1000475/): dm clone: Fix UAF in clone_dtr() (not scored)
- [GSD-2023-1000474](https://insights.sbomify.com/GSD-2023-1000474/): fs/ntfs3: Validate index root when initialize NTFS security (not scored)
- [GSD-2023-1000473](https://insights.sbomify.com/GSD-2023-1000473/): fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() (not scored)
- [GSD-2023-1000472](https://insights.sbomify.com/GSD-2023-1000472/): tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (not scored)
- [GSD-2023-1000471](https://insights.sbomify.com/GSD-2023-1000471/): fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() (not scored)
- [GSD-2023-1000470](https://insights.sbomify.com/GSD-2023-1000470/): tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (not scored)
- [GSD-2023-1000469](https://insights.sbomify.com/GSD-2023-1000469/): fs/ntfs3: Delete duplicate condition in ntfs_read_mft() (not scored)
- [GSD-2023-1000468](https://insights.sbomify.com/GSD-2023-1000468/): tracing: Fix race where eprobes can be called before the event (not scored)
- [GSD-2023-1000467](https://insights.sbomify.com/GSD-2023-1000467/): fs/ntfs3: Fix slab-out-of-bounds in r_page (not scored)
- [GSD-2023-1000466](https://insights.sbomify.com/GSD-2023-1000466/): objtool: Fix SEGFAULT (not scored)
- [GSD-2023-1000465](https://insights.sbomify.com/GSD-2023-1000465/): staging: media: tegra-video: fix device_node use after free (not scored)
- [GSD-2023-1000464](https://insights.sbomify.com/GSD-2023-1000464/): iommu/mediatek: Fix crash on isr after kexec() (not scored)
- [GSD-2023-1000463](https://insights.sbomify.com/GSD-2023-1000463/): media: dvb-core: Fix double free in dvb_register_device() (not scored)
- [GSD-2023-1000462](https://insights.sbomify.com/GSD-2023-1000462/): powerpc/rtas: avoid device tree lookups in rtas_os_term() (not scored)
- [GSD-2023-1000461](https://insights.sbomify.com/GSD-2023-1000461/): powerpc/rtas: avoid scheduling in rtas_os_term() (not scored)
- [GSD-2023-1000460](https://insights.sbomify.com/GSD-2023-1000460/): rtc: msc313: Fix function prototype mismatch in msc313_rtc_probe() (not scored)
- [GSD-2023-1000459](https://insights.sbomify.com/GSD-2023-1000459/): kprobes: kretprobe events missing on 2-core KVM guest (not scored)
- [GSD-2023-1000458](https://insights.sbomify.com/GSD-2023-1000458/): ALSA: line6: fix stack overflow in line6_midi_transmit (not scored)
- [GSD-2023-1000457](https://insights.sbomify.com/GSD-2023-1000457/): ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (not scored)
- [GSD-2023-1000456](https://insights.sbomify.com/GSD-2023-1000456/): md: fix a crash in mempool_free (not scored)
- [GSD-2023-1000455](https://insights.sbomify.com/GSD-2023-1000455/): ipmi: fix use after free in _ipmi_destroy_user() (not scored)
- [GSD-2023-1000454](https://insights.sbomify.com/GSD-2023-1000454/): ima: Fix memory leak in __ima_inode_hash() (not scored)
- [GSD-2023-1000453](https://insights.sbomify.com/GSD-2023-1000453/): PCI/sysfs: Fix double free in error path (not scored)
- [GSD-2023-1000452](https://insights.sbomify.com/GSD-2023-1000452/): parisc: led: Fix potential null-ptr-deref in start_task() (not scored)
- [GSD-2023-1000451](https://insights.sbomify.com/GSD-2023-1000451/): RISC-V: kexec: Fix memory leak of fdt buffer (not scored)
- [GSD-2023-1000450](https://insights.sbomify.com/GSD-2023-1000450/): RISC-V: kexec: Fix memory leak of elf header buffer (not scored)
- [GSD-2023-1000449](https://insights.sbomify.com/GSD-2023-1000449/): remoteproc: imx_dsp_rproc: Add mutex protection for workqueue (not scored)
- [GSD-2023-1000448](https://insights.sbomify.com/GSD-2023-1000448/): drm/vmwgfx: Validate the box size for the snooped cursor (not scored)
- [GSD-2023-1000447](https://insights.sbomify.com/GSD-2023-1000447/): ext4: silence the warning when evicting inode with dioread_nolock (not scored)
- [GSD-2023-1000446](https://insights.sbomify.com/GSD-2023-1000446/): ext4: fix undefined behavior in bit shift for ext4_check_flag_values (not scored)
- [GSD-2023-1000445](https://insights.sbomify.com/GSD-2023-1000445/): btrfs: fix resolving backrefs for inline extent followed by prealloc (not scored)
- [GSD-2023-1000444](https://insights.sbomify.com/GSD-2023-1000444/): fs: ext4: initialize fsdata in pagecache_write() (not scored)
- [GSD-2023-1000443](https://insights.sbomify.com/GSD-2023-1000443/): ext4: fix reserved cluster accounting in __es_remove_extent() (not scored)
- [GSD-2023-1000442](https://insights.sbomify.com/GSD-2023-1000442/): ext4: don't allow journal inode to have encrypt flag (not scored)
- [GSD-2023-1000441](https://insights.sbomify.com/GSD-2023-1000441/): ext4: disable fast-commit of encrypted dir operations (not scored)
- [GSD-2023-1000440](https://insights.sbomify.com/GSD-2023-1000440/): ext4: fix leaking uninitialized memory in fast-commit journal (not scored)
- [GSD-2023-1000439](https://insights.sbomify.com/GSD-2023-1000439/): ext4: don't set up encryption key during jbd2 transaction (not scored)
- [GSD-2023-1000438](https://insights.sbomify.com/GSD-2023-1000438/): ext4: fix off-by-one errors in fast-commit block filling (not scored)
- [GSD-2023-1000437](https://insights.sbomify.com/GSD-2023-1000437/): ext4: fix uninititialized value in 'ext4_evict_inode' (not scored)
- [GSD-2023-1000436](https://insights.sbomify.com/GSD-2023-1000436/): ext4: fix corruption when online resizing a 1K bigalloc fs (not scored)
- [GSD-2023-1000435](https://insights.sbomify.com/GSD-2023-1000435/): ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (not scored)
- [GSD-2023-1000434](https://insights.sbomify.com/GSD-2023-1000434/): ext4: fix deadlock due to mbcache entry corruption (not scored)
- [GSD-2023-1000433](https://insights.sbomify.com/GSD-2023-1000433/): media: dvb-core: Fix UAF due to refcount races at releasing (not scored)
- [GSD-2023-1000432](https://insights.sbomify.com/GSD-2023-1000432/): ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (not scored)
- [GSD-2023-1000431](https://insights.sbomify.com/GSD-2023-1000431/): md/bitmap: Fix bitmap chunk size overflow issues (not scored)
- [GSD-2023-1000430](https://insights.sbomify.com/GSD-2023-1000430/): ext4: fix corrupt backup group descriptors after online resize (not scored)
- [GSD-2023-1000429](https://insights.sbomify.com/GSD-2023-1000429/): drm/i915/ttm: consider CCS for backup objects (not scored)
- [GSD-2023-1000428](https://insights.sbomify.com/GSD-2023-1000428/): phy: qcom-qmp-combo: fix broken power on (not scored)
- [GSD-2023-1000427](https://insights.sbomify.com/GSD-2023-1000427/): drm/panfrost: Fix GEM handle creation ref-counting (not scored)
- [GSD-2023-1000426](https://insights.sbomify.com/GSD-2023-1000426/): net: sched: fix memory leak in tcindex_set_parms (not scored)
- [GSD-2023-1000425](https://insights.sbomify.com/GSD-2023-1000425/): bonding: fix lockdep splat in bond_miimon_commit() (not scored)
- [GSD-2023-1000424](https://insights.sbomify.com/GSD-2023-1000424/): net: hns3: fix VF promisc mode not update when mac table full (not scored)
- [GSD-2023-1000423](https://insights.sbomify.com/GSD-2023-1000423/): qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (not scored)
- [GSD-2023-1000422](https://insights.sbomify.com/GSD-2023-1000422/): PCI: Fix pci_device_is_present() for VFs by checking PF (not scored)
- [GSD-2023-1000421](https://insights.sbomify.com/GSD-2023-1000421/): nfc: Fix potential resource leaks (not scored)
- [GSD-2023-1000420](https://insights.sbomify.com/GSD-2023-1000420/): vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (not scored)
- [GSD-2023-1000419](https://insights.sbomify.com/GSD-2023-1000419/): vhost-vdpa: fix an iotlb memory leak (not scored)
- [GSD-2023-1000418](https://insights.sbomify.com/GSD-2023-1000418/): parisc: Fix locking in pdc_iodc_print() firmware call (not scored)
- [GSD-2023-1000417](https://insights.sbomify.com/GSD-2023-1000417/): virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() (not scored)
- [GSD-2023-1000416](https://insights.sbomify.com/GSD-2023-1000416/): vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (not scored)
- [GSD-2023-1000415](https://insights.sbomify.com/GSD-2023-1000415/): vdpasim: fix memory leak when freeing IOTLBs (not scored)
- [GSD-2023-1000414](https://insights.sbomify.com/GSD-2023-1000414/): net/mlx5e: Always clear dest encap in neigh-update-del (not scored)
- [GSD-2023-1000413](https://insights.sbomify.com/GSD-2023-1000413/): ext4: fix use-after-free in ext4_orphan_cleanup (not scored)
- [GSD-2023-1000412](https://insights.sbomify.com/GSD-2023-1000412/): net/mlx5: Lag, fix failure to cancel delayed bond work (not scored)
- [GSD-2023-1000411](https://insights.sbomify.com/GSD-2023-1000411/): net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (not scored)
- [GSD-2023-1000410](https://insights.sbomify.com/GSD-2023-1000410/): ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (not scored)
- [GSD-2023-1000409](https://insights.sbomify.com/GSD-2023-1000409/): RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (not scored)
- [GSD-2023-1000408](https://insights.sbomify.com/GSD-2023-1000408/): ext4: fix bug_on in __es_tree_search caused by bad quota inode (not scored)
- [GSD-2023-1000407](https://insights.sbomify.com/GSD-2023-1000407/): gpio: sifive: Fix refcount leak in sifive_gpio_probe (not scored)
- [GSD-2023-1000406](https://insights.sbomify.com/GSD-2023-1000406/): ext4: check and assert if marking an no_delete evicting inode dirty (not scored)
- [GSD-2023-1000405](https://insights.sbomify.com/GSD-2023-1000405/): ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (not scored)
- [GSD-2023-1000404](https://insights.sbomify.com/GSD-2023-1000404/): vxlan: Fix memory leaks in error path (not scored)
- [GSD-2023-1000403](https://insights.sbomify.com/GSD-2023-1000403/): netfilter: ipset: Rework long task execution when adding/deleting entries (not scored)
- [GSD-2023-1000402](https://insights.sbomify.com/GSD-2023-1000402/): perf tools: Fix resources leak in perf_data__open_dir() (not scored)
- [GSD-2023-1000401](https://insights.sbomify.com/GSD-2023-1000401/): usb: rndis_host: Secure rndis_query check against int overflow (not scored)
- [GSD-2023-1000400](https://insights.sbomify.com/GSD-2023-1000400/): caif: fix memory leak in cfctrl_linkup_request() (not scored)
- [GSD-2023-1000399](https://insights.sbomify.com/GSD-2023-1000399/): fs/ntfs3: don't hold ni_lock when calling truncate_setsize() (not scored)
- [GSD-2023-1000398](https://insights.sbomify.com/GSD-2023-1000398/): qed: allow sleep in qed_mcp_trace_dump() (not scored)
- [GSD-2023-1000397](https://insights.sbomify.com/GSD-2023-1000397/): ext4: init quota for 'old.inode' in 'ext4_rename' (not scored)
- [GSD-2023-1000396](https://insights.sbomify.com/GSD-2023-1000396/): ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (not scored)
- [GSD-2023-1000395](https://insights.sbomify.com/GSD-2023-1000395/): hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (not scored)
- [GSD-2023-1000394](https://insights.sbomify.com/GSD-2023-1000394/): ext4: fix error code return to user-space in ext4_get_branch() (not scored)
- [GSD-2023-1000393](https://insights.sbomify.com/GSD-2023-1000393/): ext4: fix inode leak in ext4_xattr_inode_create() on an error path (not scored)
- [GSD-2023-1000392](https://insights.sbomify.com/GSD-2023-1000392/): x86/kexec: Fix double-free of elf header buffer (not scored)
- [GSD-2023-1000391](https://insights.sbomify.com/GSD-2023-1000391/): bpf: Fix panic due to wrong pageattr of im->image (not scored)
- [GSD-2023-1000390](https://insights.sbomify.com/GSD-2023-1000390/): vhost_vdpa: fix the crash in unmap a large memory (not scored)
- [GSD-2023-1000389](https://insights.sbomify.com/GSD-2023-1000389/): of/fdt: run soc memory setup when early_init_dt_scan_memory fails (not scored)
- [GSD-2023-1000388](https://insights.sbomify.com/GSD-2023-1000388/): drm/i915/gvt: fix gvt debugfs destroy (not scored)
- [GSD-2023-1000387](https://insights.sbomify.com/GSD-2023-1000387/): drm/amdkfd: Fix kernel warning during topology setup (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/116/