# Vulnerabilities published in 2023


- [GSD-2023-1000286](https://insights.sbomify.com/GSD-2023-1000286/): xen/netback: Ensure protocol headers don't fall in the non-linear area (not scored)
- [GSD-2023-1000285](https://insights.sbomify.com/GSD-2023-1000285/): mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (not scored)
- [GSD-2023-1000284](https://insights.sbomify.com/GSD-2023-1000284/): xen/netback: don't call kfree_skb() with interrupts disabled (not scored)
- [GSD-2023-1000283](https://insights.sbomify.com/GSD-2023-1000283/): memcg: fix possible use-after-free in memcg_write_event_control() (not scored)
- [GSD-2023-1000282](https://insights.sbomify.com/GSD-2023-1000282/): media: v4l2-dv-timings.c: fix too strict blanking sanity checks (not scored)
- [GSD-2023-1000281](https://insights.sbomify.com/GSD-2023-1000281/): mm/gup: fix gup_pud_range() for dax (not scored)
- [GSD-2023-1000280](https://insights.sbomify.com/GSD-2023-1000280/): drm/shmem-helper: Remove errant put in error path (not scored)
- [GSD-2023-1000279](https://insights.sbomify.com/GSD-2023-1000279/): HID: core: fix shift-out-of-bounds in hid_report_raw_event (not scored)
- [GSD-2023-1000278](https://insights.sbomify.com/GSD-2023-1000278/): can: af_can: fix NULL pointer dereference in can_rcv_filter (not scored)
- [GSD-2023-1000277](https://insights.sbomify.com/GSD-2023-1000277/): gpio: amd8111: Fix PCI device reference count leak (not scored)
- [GSD-2023-1000276](https://insights.sbomify.com/GSD-2023-1000276/): af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (not scored)
- [GSD-2023-1000275](https://insights.sbomify.com/GSD-2023-1000275/): mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (not scored)
- [GSD-2023-1000274](https://insights.sbomify.com/GSD-2023-1000274/): Bluetooth: Fix not cleanup led when bt_init fails (not scored)
- [GSD-2023-1000273](https://insights.sbomify.com/GSD-2023-1000273/): xen-netfront: Fix NULL sring after live migration (not scored)
- [GSD-2023-1000272](https://insights.sbomify.com/GSD-2023-1000272/): net: mvneta: Prevent out of bounds read in mvneta_config_rss() (not scored)
- [GSD-2023-1000271](https://insights.sbomify.com/GSD-2023-1000271/): NFC: nci: Bounds check struct nfc_target arrays (not scored)
- [GSD-2023-1000270](https://insights.sbomify.com/GSD-2023-1000270/): net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (not scored)
- [GSD-2023-1000269](https://insights.sbomify.com/GSD-2023-1000269/): net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (not scored)
- [GSD-2023-1000268](https://insights.sbomify.com/GSD-2023-1000268/): ethernet: aeroflex: fix potential skb leak in greth_init_rings() (not scored)
- [GSD-2023-1000267](https://insights.sbomify.com/GSD-2023-1000267/): ipv6: avoid use-after-free in ip6_fragment() (not scored)
- [GSD-2023-1000266](https://insights.sbomify.com/GSD-2023-1000266/): net: mvneta: Fix an out of bounds check (not scored)
- [GSD-2023-1000265](https://insights.sbomify.com/GSD-2023-1000265/): ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (not scored)
- [GSD-2023-1000264](https://insights.sbomify.com/GSD-2023-1000264/): pinctrl: meditatek: Startup with the IRQs disabled (not scored)
- [GSD-2023-1000263](https://insights.sbomify.com/GSD-2023-1000263/): btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (not scored)
- [GSD-2023-1000262](https://insights.sbomify.com/GSD-2023-1000262/): iio: health: afe4403: Fix oob read in afe4403_read_raw (not scored)
- [GSD-2023-1000261](https://insights.sbomify.com/GSD-2023-1000261/): iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (not scored)
- [GSD-2023-1000260](https://insights.sbomify.com/GSD-2023-1000260/): libbpf: Handle size overflow for ringbuf mmap (not scored)
- [GSD-2023-1000259](https://insights.sbomify.com/GSD-2023-1000259/): hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (not scored)
- [GSD-2023-1000258](https://insights.sbomify.com/GSD-2023-1000258/): ixgbevf: Fix resource leak in ixgbevf_init_module() (not scored)
- [GSD-2023-1000257](https://insights.sbomify.com/GSD-2023-1000257/): iavf: Fix error handling in iavf_init_module() (not scored)
- [GSD-2023-1000256](https://insights.sbomify.com/GSD-2023-1000256/): fm10k: Fix error handling in fm10k_init_module() (not scored)
- [GSD-2023-1000255](https://insights.sbomify.com/GSD-2023-1000255/): e100: Fix possible use after free in e100_xmit_prepare (not scored)
- [GSD-2023-1000254](https://insights.sbomify.com/GSD-2023-1000254/): net/mlx5e: Fix use-after-free when reverting termination table (not scored)
- [GSD-2023-1000253](https://insights.sbomify.com/GSD-2023-1000253/): wifi: cfg80211: fix buffer overflow in elem comparison (not scored)
- [GSD-2023-1000252](https://insights.sbomify.com/GSD-2023-1000252/): wifi: cfg80211: don't allow multi-BSSID in S1G (not scored)
- [GSD-2023-1000251](https://insights.sbomify.com/GSD-2023-1000251/): wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (not scored)
- [GSD-2023-1000250](https://insights.sbomify.com/GSD-2023-1000250/): net: phy: fix null-ptr-deref while probe() failed (not scored)
- [GSD-2023-1000249](https://insights.sbomify.com/GSD-2023-1000249/): net/9p: Fix a potential socket leak in p9_socket_open (not scored)
- [GSD-2023-1000248](https://insights.sbomify.com/GSD-2023-1000248/): net: ethernet: nixge: fix NULL dereference (not scored)
- [GSD-2023-1000247](https://insights.sbomify.com/GSD-2023-1000247/): tipc: re-fetch skb cb after tipc_msg_validate (not scored)
- [GSD-2023-1000246](https://insights.sbomify.com/GSD-2023-1000246/): net: hsr: Fix potential use-after-free (not scored)
- [GSD-2023-1000245](https://insights.sbomify.com/GSD-2023-1000245/): net: tun: Fix use-after-free in tun_detach() (not scored)
- [GSD-2023-1000244](https://insights.sbomify.com/GSD-2023-1000244/): sctp: fix memory leak in sctp_stream_outq_migrate() (not scored)
- [GSD-2023-1000243](https://insights.sbomify.com/GSD-2023-1000243/): hwmon: (coretemp) Check for null before removing sysfs attrs (not scored)
- [GSD-2023-1000242](https://insights.sbomify.com/GSD-2023-1000242/): hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (not scored)
- [GSD-2023-1000241](https://insights.sbomify.com/GSD-2023-1000241/): tracing: Free buffers when a used dynamic event is removed (not scored)
- [GSD-2023-1000240](https://insights.sbomify.com/GSD-2023-1000240/): ASoC: ops: Fix bounds check for _sx controls (not scored)
- [GSD-2023-1000239](https://insights.sbomify.com/GSD-2023-1000239/): nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (not scored)
- [GSD-2023-1000238](https://insights.sbomify.com/GSD-2023-1000238/): drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (not scored)
- [GSD-2023-1000237](https://insights.sbomify.com/GSD-2023-1000237/): Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (not scored)
- [GSD-2023-1000236](https://insights.sbomify.com/GSD-2023-1000236/): iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (not scored)
- [GSD-2023-1000235](https://insights.sbomify.com/GSD-2023-1000235/): iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (not scored)
- [GSD-2023-1000234](https://insights.sbomify.com/GSD-2023-1000234/): ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (not scored)
- [GSD-2023-1000233](https://insights.sbomify.com/GSD-2023-1000233/): char: tpm: Protect tpm_pm_suspend with locks (not scored)
- [GSD-2023-1000232](https://insights.sbomify.com/GSD-2023-1000232/): Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (not scored)
- [GSD-2023-1000231](https://insights.sbomify.com/GSD-2023-1000231/): ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (not scored)
- [GSD-2023-1000230](https://insights.sbomify.com/GSD-2023-1000230/): ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (not scored)
- [GSD-2023-1000229](https://insights.sbomify.com/GSD-2023-1000229/): mm/khugepaged: take the right locks for page table retraction (not scored)
- [GSD-2023-1000228](https://insights.sbomify.com/GSD-2023-1000228/): ASoC: soc-pcm: Add NULL check in BE reparenting (not scored)
- [GSD-2023-1000227](https://insights.sbomify.com/GSD-2023-1000227/): fbcon: Use kzalloc() in fbcon_prepare_logo() (not scored)
- [GSD-2023-1000226](https://insights.sbomify.com/GSD-2023-1000226/): mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (not scored)
- [GSD-2023-1000225](https://insights.sbomify.com/GSD-2023-1000225/): xen/netback: Ensure protocol headers don't fall in the non-linear area (not scored)
- [GSD-2023-1000224](https://insights.sbomify.com/GSD-2023-1000224/): xen/netback: don't call kfree_skb() with interrupts disabled (not scored)
- [GSD-2023-1000223](https://insights.sbomify.com/GSD-2023-1000223/): media: v4l2-dv-timings.c: fix too strict blanking sanity checks (not scored)
- [GSD-2023-1000222](https://insights.sbomify.com/GSD-2023-1000222/): memcg: fix possible use-after-free in memcg_write_event_control() (not scored)
- [GSD-2023-1000221](https://insights.sbomify.com/GSD-2023-1000221/): mm/gup: fix gup_pud_range() for dax (not scored)
- [GSD-2023-1000220](https://insights.sbomify.com/GSD-2023-1000220/): drm/shmem-helper: Remove errant put in error path (not scored)
- [GSD-2023-1000219](https://insights.sbomify.com/GSD-2023-1000219/): HID: core: fix shift-out-of-bounds in hid_report_raw_event (not scored)
- [GSD-2023-1000218](https://insights.sbomify.com/GSD-2023-1000218/): can: af_can: fix NULL pointer dereference in can_rcv_filter (not scored)
- [GSD-2023-1000217](https://insights.sbomify.com/GSD-2023-1000217/): Bluetooth: Fix crash when replugging CSR fake controllers (not scored)
- [GSD-2023-1000216](https://insights.sbomify.com/GSD-2023-1000216/): gpio: amd8111: Fix PCI device reference count leak (not scored)
- [GSD-2023-1000215](https://insights.sbomify.com/GSD-2023-1000215/): netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (not scored)
- [GSD-2023-1000214](https://insights.sbomify.com/GSD-2023-1000214/): af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (not scored)
- [GSD-2023-1000213](https://insights.sbomify.com/GSD-2023-1000213/): mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (not scored)
- [GSD-2023-1000212](https://insights.sbomify.com/GSD-2023-1000212/): Bluetooth: Fix not cleanup led when bt_init fails (not scored)
- [GSD-2023-1000211](https://insights.sbomify.com/GSD-2023-1000211/): xen-netfront: Fix NULL sring after live migration (not scored)
- [GSD-2023-1000210](https://insights.sbomify.com/GSD-2023-1000210/): net: mvneta: Prevent out of bounds read in mvneta_config_rss() (not scored)
- [GSD-2023-1000209](https://insights.sbomify.com/GSD-2023-1000209/): NFC: nci: Bounds check struct nfc_target arrays (not scored)
- [GSD-2023-1000208](https://insights.sbomify.com/GSD-2023-1000208/): net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (not scored)
- [GSD-2023-1000207](https://insights.sbomify.com/GSD-2023-1000207/): net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (not scored)
- [GSD-2023-1000206](https://insights.sbomify.com/GSD-2023-1000206/): net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (not scored)
- [GSD-2023-1000205](https://insights.sbomify.com/GSD-2023-1000205/): tipc: call tipc_lxc_xmit without holding node_read_lock (not scored)
- [GSD-2023-1000204](https://insights.sbomify.com/GSD-2023-1000204/): ethernet: aeroflex: fix potential skb leak in greth_init_rings() (not scored)
- [GSD-2023-1000203](https://insights.sbomify.com/GSD-2023-1000203/): ipv6: avoid use-after-free in ip6_fragment() (not scored)
- [GSD-2023-1000202](https://insights.sbomify.com/GSD-2023-1000202/): net: mvneta: Fix an out of bounds check (not scored)
- [GSD-2023-1000201](https://insights.sbomify.com/GSD-2023-1000201/): ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (not scored)
- [GSD-2023-1000200](https://insights.sbomify.com/GSD-2023-1000200/): pinctrl: meditatek: Startup with the IRQs disabled (not scored)
- [GSD-2023-1000199](https://insights.sbomify.com/GSD-2023-1000199/): usb: gadget: uvc: Prevent buffer overflow in setup handler (not scored)
- [GSD-2023-1000198](https://insights.sbomify.com/GSD-2023-1000198/): igb: Initialize mailbox message for VF reset (not scored)
- [GSD-2023-1000197](https://insights.sbomify.com/GSD-2023-1000197/): udf: Discard preallocation before extending file with a hole (not scored)
- [GSD-2023-1000196](https://insights.sbomify.com/GSD-2023-1000196/): udf: Fix preallocation discarding at indirect extent boundary (not scored)
- [GSD-2023-1000195](https://insights.sbomify.com/GSD-2023-1000195/): udf: Fix extending file within last block (not scored)
- [GSD-2023-1000194](https://insights.sbomify.com/GSD-2023-1000194/): Bluetooth: L2CAP: Fix u8 overflow (not scored)
- [GSD-2023-1000193](https://insights.sbomify.com/GSD-2023-1000193/): iio: health: afe4403: Fix oob read in afe4403_read_raw (not scored)
- [GSD-2023-1000192](https://insights.sbomify.com/GSD-2023-1000192/): btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (not scored)
- [GSD-2023-1000191](https://insights.sbomify.com/GSD-2023-1000191/): iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (not scored)
- [GSD-2023-1000190](https://insights.sbomify.com/GSD-2023-1000190/): libbpf: Handle size overflow for ringbuf mmap (not scored)
- [GSD-2023-1000189](https://insights.sbomify.com/GSD-2023-1000189/): hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (not scored)
- [GSD-2023-1000188](https://insights.sbomify.com/GSD-2023-1000188/): ixgbevf: Fix resource leak in ixgbevf_init_module() (not scored)
- [GSD-2023-1000187](https://insights.sbomify.com/GSD-2023-1000187/): fm10k: Fix error handling in fm10k_init_module() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/118/