# Vulnerabilities published in 2023


- [GSD-2023-1000386](https://insights.sbomify.com/GSD-2023-1000386/): drm/i915/gvt: fix vgpu debugfs clean in remove (not scored)
- [GSD-2023-1000385](https://insights.sbomify.com/GSD-2023-1000385/): ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob (not scored)
- [GSD-2023-1000384](https://insights.sbomify.com/GSD-2023-1000384/): ASoC: SOF: Revert: "core: unregister clients and machine drivers in .shutdown" (not scored)
- [GSD-2023-1000383](https://insights.sbomify.com/GSD-2023-1000383/): 9p/client: fix data race on req->status (not scored)
- [GSD-2023-1000382](https://insights.sbomify.com/GSD-2023-1000382/): ASoC: SOF: mediatek: initialize panic_info to zero (not scored)
- [GSD-2023-1000381](https://insights.sbomify.com/GSD-2023-1000381/): drm/amdgpu: Fix size validation for non-exclusive domains (v4) (not scored)
- [GSD-2023-1000380](https://insights.sbomify.com/GSD-2023-1000380/): drm/amdkfd: Fix kfd_process_device_init_vm error handling (not scored)
- [GSD-2023-1000379](https://insights.sbomify.com/GSD-2023-1000379/): drm/amdkfd: Fix double release compute pasid (not scored)
- [GSD-2023-1000378](https://insights.sbomify.com/GSD-2023-1000378/): nvme: fix multipath crash caused by flush request when blktrace is enabled (not scored)
- [GSD-2023-1000377](https://insights.sbomify.com/GSD-2023-1000377/): btrfs: handle case when repair happens with dev-replace (not scored)
- [GSD-2023-1000376](https://insights.sbomify.com/GSD-2023-1000376/): efi: random: combine bootloader provided RNG seed with RNG protocol output (not scored)
- [GSD-2023-1000375](https://insights.sbomify.com/GSD-2023-1000375/): iio: health: afe4403: Fix oob read in afe4403_read_raw (not scored)
- [GSD-2023-1000374](https://insights.sbomify.com/GSD-2023-1000374/): btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (not scored)
- [GSD-2023-1000373](https://insights.sbomify.com/GSD-2023-1000373/): iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (not scored)
- [GSD-2023-1000372](https://insights.sbomify.com/GSD-2023-1000372/): hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (not scored)
- [GSD-2023-1000371](https://insights.sbomify.com/GSD-2023-1000371/): net: phy: fix null-ptr-deref while probe() failed (not scored)
- [GSD-2023-1000370](https://insights.sbomify.com/GSD-2023-1000370/): net/9p: Fix a potential socket leak in p9_socket_open (not scored)
- [GSD-2023-1000369](https://insights.sbomify.com/GSD-2023-1000369/): net: hsr: Fix potential use-after-free (not scored)
- [GSD-2023-1000368](https://insights.sbomify.com/GSD-2023-1000368/): hwmon: (coretemp) Check for null before removing sysfs attrs (not scored)
- [GSD-2023-1000367](https://insights.sbomify.com/GSD-2023-1000367/): hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (not scored)
- [GSD-2023-1000366](https://insights.sbomify.com/GSD-2023-1000366/): ASoC: ops: Fix bounds check for _sx controls (not scored)
- [GSD-2023-1000365](https://insights.sbomify.com/GSD-2023-1000365/): iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (not scored)
- [GSD-2023-1000364](https://insights.sbomify.com/GSD-2023-1000364/): nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (not scored)
- [GSD-2023-1000363](https://insights.sbomify.com/GSD-2023-1000363/): ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (not scored)
- [GSD-2023-1000362](https://insights.sbomify.com/GSD-2023-1000362/): ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (not scored)
- [GSD-2023-1000361](https://insights.sbomify.com/GSD-2023-1000361/): ASoC: soc-pcm: Add NULL check in BE reparenting (not scored)
- [GSD-2023-1000360](https://insights.sbomify.com/GSD-2023-1000360/): xen/netback: Ensure protocol headers don't fall in the non-linear area (not scored)
- [GSD-2023-1000359](https://insights.sbomify.com/GSD-2023-1000359/): xen/netback: don't call kfree_skb() with interrupts disabled (not scored)
- [GSD-2023-1000358](https://insights.sbomify.com/GSD-2023-1000358/): media: v4l2-dv-timings.c: fix too strict blanking sanity checks (not scored)
- [GSD-2023-1000357](https://insights.sbomify.com/GSD-2023-1000357/): memcg: fix possible use-after-free in memcg_write_event_control() (not scored)
- [GSD-2023-1000356](https://insights.sbomify.com/GSD-2023-1000356/): HID: core: fix shift-out-of-bounds in hid_report_raw_event (not scored)
- [GSD-2023-1000355](https://insights.sbomify.com/GSD-2023-1000355/): gpio: amd8111: Fix PCI device reference count leak (not scored)
- [GSD-2023-1000354](https://insights.sbomify.com/GSD-2023-1000354/): mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (not scored)
- [GSD-2023-1000353](https://insights.sbomify.com/GSD-2023-1000353/): net: mvneta: Prevent out of bounds read in mvneta_config_rss() (not scored)
- [GSD-2023-1000352](https://insights.sbomify.com/GSD-2023-1000352/): NFC: nci: Bounds check struct nfc_target arrays (not scored)
- [GSD-2023-1000351](https://insights.sbomify.com/GSD-2023-1000351/): net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (not scored)
- [GSD-2023-1000350](https://insights.sbomify.com/GSD-2023-1000350/): net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (not scored)
- [GSD-2023-1000349](https://insights.sbomify.com/GSD-2023-1000349/): ethernet: aeroflex: fix potential skb leak in greth_init_rings() (not scored)
- [GSD-2023-1000348](https://insights.sbomify.com/GSD-2023-1000348/): ipv6: avoid use-after-free in ip6_fragment() (not scored)
- [GSD-2023-1000347](https://insights.sbomify.com/GSD-2023-1000347/): net: mvneta: Fix an out of bounds check (not scored)
- [GSD-2023-1000346](https://insights.sbomify.com/GSD-2023-1000346/): iio: health: afe4403: Fix oob read in afe4403_read_raw (not scored)
- [GSD-2023-1000345](https://insights.sbomify.com/GSD-2023-1000345/): iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (not scored)
- [GSD-2023-1000344](https://insights.sbomify.com/GSD-2023-1000344/): hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (not scored)
- [GSD-2023-1000343](https://insights.sbomify.com/GSD-2023-1000343/): btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (not scored)
- [GSD-2023-1000342](https://insights.sbomify.com/GSD-2023-1000342/): net: phy: fix null-ptr-deref while probe() failed (not scored)
- [GSD-2023-1000341](https://insights.sbomify.com/GSD-2023-1000341/): net/9p: Fix a potential socket leak in p9_socket_open (not scored)
- [GSD-2023-1000340](https://insights.sbomify.com/GSD-2023-1000340/): net: hsr: Fix potential use-after-free (not scored)
- [GSD-2023-1000339](https://insights.sbomify.com/GSD-2023-1000339/): net: tun: Fix use-after-free in tun_detach() (not scored)
- [GSD-2023-1000338](https://insights.sbomify.com/GSD-2023-1000338/): hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (not scored)
- [GSD-2023-1000337](https://insights.sbomify.com/GSD-2023-1000337/): hwmon: (coretemp) Check for null before removing sysfs attrs (not scored)
- [GSD-2023-1000336](https://insights.sbomify.com/GSD-2023-1000336/): iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (not scored)
- [GSD-2023-1000335](https://insights.sbomify.com/GSD-2023-1000335/): ASoC: ops: Fix bounds check for _sx controls (not scored)
- [GSD-2023-1000334](https://insights.sbomify.com/GSD-2023-1000334/): nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (not scored)
- [GSD-2023-1000333](https://insights.sbomify.com/GSD-2023-1000333/): Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (not scored)
- [GSD-2023-1000332](https://insights.sbomify.com/GSD-2023-1000332/): ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (not scored)
- [GSD-2023-1000331](https://insights.sbomify.com/GSD-2023-1000331/): ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (not scored)
- [GSD-2023-1000330](https://insights.sbomify.com/GSD-2023-1000330/): fbcon: Use kzalloc() in fbcon_prepare_logo() (not scored)
- [GSD-2023-1000329](https://insights.sbomify.com/GSD-2023-1000329/): ASoC: soc-pcm: Add NULL check in BE reparenting (not scored)
- [GSD-2023-1000328](https://insights.sbomify.com/GSD-2023-1000328/): xen/netback: Ensure protocol headers don't fall in the non-linear area (not scored)
- [GSD-2023-1000327](https://insights.sbomify.com/GSD-2023-1000327/): xen/netback: don't call kfree_skb() with interrupts disabled (not scored)
- [GSD-2023-1000326](https://insights.sbomify.com/GSD-2023-1000326/): memcg: fix possible use-after-free in memcg_write_event_control() (not scored)
- [GSD-2023-1000325](https://insights.sbomify.com/GSD-2023-1000325/): media: v4l2-dv-timings.c: fix too strict blanking sanity checks (not scored)
- [GSD-2023-1000324](https://insights.sbomify.com/GSD-2023-1000324/): HID: core: fix shift-out-of-bounds in hid_report_raw_event (not scored)
- [GSD-2023-1000323](https://insights.sbomify.com/GSD-2023-1000323/): gpio: amd8111: Fix PCI device reference count leak (not scored)
- [GSD-2023-1000322](https://insights.sbomify.com/GSD-2023-1000322/): Bluetooth: Fix not cleanup led when bt_init fails (not scored)
- [GSD-2023-1000321](https://insights.sbomify.com/GSD-2023-1000321/): mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (not scored)
- [GSD-2023-1000320](https://insights.sbomify.com/GSD-2023-1000320/): net: mvneta: Prevent out of bounds read in mvneta_config_rss() (not scored)
- [GSD-2023-1000319](https://insights.sbomify.com/GSD-2023-1000319/): xen-netfront: Fix NULL sring after live migration (not scored)
- [GSD-2023-1000318](https://insights.sbomify.com/GSD-2023-1000318/): NFC: nci: Bounds check struct nfc_target arrays (not scored)
- [GSD-2023-1000317](https://insights.sbomify.com/GSD-2023-1000317/): net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (not scored)
- [GSD-2023-1000316](https://insights.sbomify.com/GSD-2023-1000316/): net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (not scored)
- [GSD-2023-1000315](https://insights.sbomify.com/GSD-2023-1000315/): net: mvneta: Fix an out of bounds check (not scored)
- [GSD-2023-1000314](https://insights.sbomify.com/GSD-2023-1000314/): ipv6: avoid use-after-free in ip6_fragment() (not scored)
- [GSD-2023-1000313](https://insights.sbomify.com/GSD-2023-1000313/): ethernet: aeroflex: fix potential skb leak in greth_init_rings() (not scored)
- [GSD-2023-1000312](https://insights.sbomify.com/GSD-2023-1000312/): iio: health: afe4403: Fix oob read in afe4403_read_raw (not scored)
- [GSD-2023-1000311](https://insights.sbomify.com/GSD-2023-1000311/): iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (not scored)
- [GSD-2023-1000310](https://insights.sbomify.com/GSD-2023-1000310/): hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (not scored)
- [GSD-2023-1000309](https://insights.sbomify.com/GSD-2023-1000309/): btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (not scored)
- [GSD-2023-1000308](https://insights.sbomify.com/GSD-2023-1000308/): net/mlx5e: Fix use-after-free when reverting termination table (not scored)
- [GSD-2023-1000307](https://insights.sbomify.com/GSD-2023-1000307/): wifi: cfg80211: fix buffer overflow in elem comparison (not scored)
- [GSD-2023-1000306](https://insights.sbomify.com/GSD-2023-1000306/): net: phy: fix null-ptr-deref while probe() failed (not scored)
- [GSD-2023-1000305](https://insights.sbomify.com/GSD-2023-1000305/): net/9p: Fix a potential socket leak in p9_socket_open (not scored)
- [GSD-2023-1000304](https://insights.sbomify.com/GSD-2023-1000304/): net: ethernet: nixge: fix NULL dereference (not scored)
- [GSD-2023-1000303](https://insights.sbomify.com/GSD-2023-1000303/): net: hsr: Fix potential use-after-free (not scored)
- [GSD-2023-1000302](https://insights.sbomify.com/GSD-2023-1000302/): net: tun: Fix use-after-free in tun_detach() (not scored)
- [GSD-2023-1000301](https://insights.sbomify.com/GSD-2023-1000301/): sctp: fix memory leak in sctp_stream_outq_migrate() (not scored)
- [GSD-2023-1000300](https://insights.sbomify.com/GSD-2023-1000300/): hwmon: (coretemp) Check for null before removing sysfs attrs (not scored)
- [GSD-2023-1000299](https://insights.sbomify.com/GSD-2023-1000299/): hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (not scored)
- [GSD-2023-1000298](https://insights.sbomify.com/GSD-2023-1000298/): nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (not scored)
- [GSD-2023-1000297](https://insights.sbomify.com/GSD-2023-1000297/): Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (not scored)
- [GSD-2023-1000296](https://insights.sbomify.com/GSD-2023-1000296/): tracing: Free buffers when a used dynamic event is removed (not scored)
- [GSD-2023-1000295](https://insights.sbomify.com/GSD-2023-1000295/): ASoC: ops: Fix bounds check for _sx controls (not scored)
- [GSD-2023-1000294](https://insights.sbomify.com/GSD-2023-1000294/): ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (not scored)
- [GSD-2023-1000293](https://insights.sbomify.com/GSD-2023-1000293/): iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (not scored)
- [GSD-2023-1000292](https://insights.sbomify.com/GSD-2023-1000292/): char: tpm: Protect tpm_pm_suspend with locks (not scored)
- [GSD-2023-1000291](https://insights.sbomify.com/GSD-2023-1000291/): ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (not scored)
- [GSD-2023-1000290](https://insights.sbomify.com/GSD-2023-1000290/): ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (not scored)
- [GSD-2023-1000289](https://insights.sbomify.com/GSD-2023-1000289/): mm/khugepaged: take the right locks for page table retraction (not scored)
- [GSD-2023-1000288](https://insights.sbomify.com/GSD-2023-1000288/): ASoC: soc-pcm: Add NULL check in BE reparenting (not scored)
- [GSD-2023-1000287](https://insights.sbomify.com/GSD-2023-1000287/): fbcon: Use kzalloc() in fbcon_prepare_logo() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/117/