# Vulnerabilities published in 2023


- [GSD-2023-1000186](https://insights.sbomify.com/GSD-2023-1000186/): iavf: Fix error handling in iavf_init_module() (not scored)
- [GSD-2023-1000185](https://insights.sbomify.com/GSD-2023-1000185/): e100: Fix possible use after free in e100_xmit_prepare (not scored)
- [GSD-2023-1000184](https://insights.sbomify.com/GSD-2023-1000184/): can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (not scored)
- [GSD-2023-1000183](https://insights.sbomify.com/GSD-2023-1000183/): wifi: cfg80211: fix buffer overflow in elem comparison (not scored)
- [GSD-2023-1000182](https://insights.sbomify.com/GSD-2023-1000182/): net/mlx5e: Fix use-after-free when reverting termination table (not scored)
- [GSD-2023-1000181](https://insights.sbomify.com/GSD-2023-1000181/): wifi: cfg80211: don't allow multi-BSSID in S1G (not scored)
- [GSD-2023-1000180](https://insights.sbomify.com/GSD-2023-1000180/): wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (not scored)
- [GSD-2023-1000179](https://insights.sbomify.com/GSD-2023-1000179/): net: phy: fix null-ptr-deref while probe() failed (not scored)
- [GSD-2023-1000178](https://insights.sbomify.com/GSD-2023-1000178/): net/9p: Fix a potential socket leak in p9_socket_open (not scored)
- [GSD-2023-1000177](https://insights.sbomify.com/GSD-2023-1000177/): net: ethernet: nixge: fix NULL dereference (not scored)
- [GSD-2023-1000176](https://insights.sbomify.com/GSD-2023-1000176/): tipc: re-fetch skb cb after tipc_msg_validate (not scored)
- [GSD-2023-1000175](https://insights.sbomify.com/GSD-2023-1000175/): net: hsr: Fix potential use-after-free (not scored)
- [GSD-2023-1000174](https://insights.sbomify.com/GSD-2023-1000174/): net: mdiobus: fix unbalanced node reference count (not scored)
- [GSD-2023-1000173](https://insights.sbomify.com/GSD-2023-1000173/): net: tun: Fix use-after-free in tun_detach() (not scored)
- [GSD-2023-1000172](https://insights.sbomify.com/GSD-2023-1000172/): sctp: fix memory leak in sctp_stream_outq_migrate() (not scored)
- [GSD-2023-1000171](https://insights.sbomify.com/GSD-2023-1000171/): hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (not scored)
- [GSD-2023-1000170](https://insights.sbomify.com/GSD-2023-1000170/): hwmon: (coretemp) Check for null before removing sysfs attrs (not scored)
- [GSD-2023-1000169](https://insights.sbomify.com/GSD-2023-1000169/): nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (not scored)
- [GSD-2023-1000168](https://insights.sbomify.com/GSD-2023-1000168/): tracing: Free buffers when a used dynamic event is removed (not scored)
- [GSD-2023-1000167](https://insights.sbomify.com/GSD-2023-1000167/): drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (not scored)
- [GSD-2023-1000166](https://insights.sbomify.com/GSD-2023-1000166/): Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (not scored)
- [GSD-2023-1000165](https://insights.sbomify.com/GSD-2023-1000165/): riscv: Sync efi page table's kernel mappings before switching (not scored)
- [GSD-2023-1000164](https://insights.sbomify.com/GSD-2023-1000164/): ASoC: ops: Fix bounds check for _sx controls (not scored)
- [GSD-2023-1000163](https://insights.sbomify.com/GSD-2023-1000163/): riscv: fix race when vmap stack overflow (not scored)
- [GSD-2023-1000162](https://insights.sbomify.com/GSD-2023-1000162/): nvme: fix SRCU protection of nvme_ns_head list (not scored)
- [GSD-2023-1000161](https://insights.sbomify.com/GSD-2023-1000161/): iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (not scored)
- [GSD-2023-1000160](https://insights.sbomify.com/GSD-2023-1000160/): ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (not scored)
- [GSD-2023-1000159](https://insights.sbomify.com/GSD-2023-1000159/): iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (not scored)
- [GSD-2023-1000158](https://insights.sbomify.com/GSD-2023-1000158/): Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (not scored)
- [GSD-2023-1000157](https://insights.sbomify.com/GSD-2023-1000157/): char: tpm: Protect tpm_pm_suspend with locks (not scored)
- [GSD-2023-1000156](https://insights.sbomify.com/GSD-2023-1000156/): ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (not scored)
- [GSD-2023-1000155](https://insights.sbomify.com/GSD-2023-1000155/): ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (not scored)
- [GSD-2023-1000154](https://insights.sbomify.com/GSD-2023-1000154/): ASoC: soc-pcm: Add NULL check in BE reparenting (not scored)
- [GSD-2023-1000153](https://insights.sbomify.com/GSD-2023-1000153/): fbcon: Use kzalloc() in fbcon_prepare_logo() (not scored)
- [GSD-2023-1000152](https://insights.sbomify.com/GSD-2023-1000152/): mm/khugepaged: take the right locks for page table retraction (not scored)
- [GSD-2023-1000151](https://insights.sbomify.com/GSD-2023-1000151/): mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (not scored)
- [GSD-2023-1000150](https://insights.sbomify.com/GSD-2023-1000150/): xen/netback: Ensure protocol headers don't fall in the non-linear area (not scored)
- [GSD-2023-1000149](https://insights.sbomify.com/GSD-2023-1000149/): xen/netback: don't call kfree_skb() with interrupts disabled (not scored)
- [GSD-2023-1000148](https://insights.sbomify.com/GSD-2023-1000148/): media: v4l2-dv-timings.c: fix too strict blanking sanity checks (not scored)
- [GSD-2023-1000147](https://insights.sbomify.com/GSD-2023-1000147/): memcg: fix possible use-after-free in memcg_write_event_control() (not scored)
- [GSD-2023-1000146](https://insights.sbomify.com/GSD-2023-1000146/): mm/gup: fix gup_pud_range() for dax (not scored)
- [GSD-2023-1000145](https://insights.sbomify.com/GSD-2023-1000145/): net: mana: Fix race on per-CQ variable napi work_done (not scored)
- [GSD-2023-1000144](https://insights.sbomify.com/GSD-2023-1000144/): io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (not scored)
- [GSD-2023-1000143](https://insights.sbomify.com/GSD-2023-1000143/): Bluetooth: Fix crash when replugging CSR fake controllers (not scored)
- [GSD-2023-1000142](https://insights.sbomify.com/GSD-2023-1000142/): HID: core: fix shift-out-of-bounds in hid_report_raw_event (not scored)
- [GSD-2023-1000141](https://insights.sbomify.com/GSD-2023-1000141/): drm/shmem-helper: Remove errant put in error path (not scored)
- [GSD-2023-1000140](https://insights.sbomify.com/GSD-2023-1000140/): net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (not scored)
- [GSD-2023-1000139](https://insights.sbomify.com/GSD-2023-1000139/): gpiolib: fix memory leak in gpiochip_setup_dev() (not scored)
- [GSD-2023-1000138](https://insights.sbomify.com/GSD-2023-1000138/): can: af_can: fix NULL pointer dereference in can_rcv_filter (not scored)
- [GSD-2023-1000137](https://insights.sbomify.com/GSD-2023-1000137/): netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (not scored)
- [GSD-2023-1000136](https://insights.sbomify.com/GSD-2023-1000136/): gpio: amd8111: Fix PCI device reference count leak (not scored)
- [GSD-2023-1000135](https://insights.sbomify.com/GSD-2023-1000135/): af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (not scored)
- [GSD-2023-1000134](https://insights.sbomify.com/GSD-2023-1000134/): Bluetooth: Fix not cleanup led when bt_init fails (not scored)
- [GSD-2023-1000133](https://insights.sbomify.com/GSD-2023-1000133/): mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (not scored)
- [GSD-2023-1000132](https://insights.sbomify.com/GSD-2023-1000132/): octeontx2-pf: Fix potential memory leak in otx2_init_tc() (not scored)
- [GSD-2023-1000131](https://insights.sbomify.com/GSD-2023-1000131/): xen-netfront: Fix NULL sring after live migration (not scored)
- [GSD-2023-1000130](https://insights.sbomify.com/GSD-2023-1000130/): net: mvneta: Prevent out of bounds read in mvneta_config_rss() (not scored)
- [GSD-2023-1000129](https://insights.sbomify.com/GSD-2023-1000129/): gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (not scored)
- [GSD-2023-1000128](https://insights.sbomify.com/GSD-2023-1000128/): NFC: nci: Bounds check struct nfc_target arrays (not scored)
- [GSD-2023-1000127](https://insights.sbomify.com/GSD-2023-1000127/): net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (not scored)
- [GSD-2023-1000126](https://insights.sbomify.com/GSD-2023-1000126/): net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (not scored)
- [GSD-2023-1000125](https://insights.sbomify.com/GSD-2023-1000125/): net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (not scored)
- [GSD-2023-1000124](https://insights.sbomify.com/GSD-2023-1000124/): net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (not scored)
- [GSD-2023-1000123](https://insights.sbomify.com/GSD-2023-1000123/): tipc: call tipc_lxc_xmit without holding node_read_lock (not scored)
- [GSD-2023-1000122](https://insights.sbomify.com/GSD-2023-1000122/): ethernet: aeroflex: fix potential skb leak in greth_init_rings() (not scored)
- [GSD-2023-1000121](https://insights.sbomify.com/GSD-2023-1000121/): dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (not scored)
- [GSD-2023-1000120](https://insights.sbomify.com/GSD-2023-1000120/): net: thunderbolt: fix memory leak in tbnet_open() (not scored)
- [GSD-2023-1000119](https://insights.sbomify.com/GSD-2023-1000119/): ipv6: avoid use-after-free in ip6_fragment() (not scored)
- [GSD-2023-1000118](https://insights.sbomify.com/GSD-2023-1000118/): net: mvneta: Fix an out of bounds check (not scored)
- [GSD-2023-1000117](https://insights.sbomify.com/GSD-2023-1000117/): s390/qeth: fix use-after-free in hsci (not scored)
- [GSD-2023-1000116](https://insights.sbomify.com/GSD-2023-1000116/): rtc: cmos: Fix event handler registration ordering issue (not scored)
- [GSD-2023-1000115](https://insights.sbomify.com/GSD-2023-1000115/): ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (not scored)
- [GSD-2023-1000114](https://insights.sbomify.com/GSD-2023-1000114/): PCI: mt7621: Add sentinel to quirks table (not scored)
- [GSD-2023-1000113](https://insights.sbomify.com/GSD-2023-1000113/): pinctrl: meditatek: Startup with the IRQs disabled (not scored)
- [GSD-2023-1000112](https://insights.sbomify.com/GSD-2023-1000112/): udf: Discard preallocation before extending file with a hole (not scored)
- [GSD-2023-1000111](https://insights.sbomify.com/GSD-2023-1000111/): usb: gadget: uvc: Prevent buffer overflow in setup handler (not scored)
- [GSD-2023-1000110](https://insights.sbomify.com/GSD-2023-1000110/): igb: Initialize mailbox message for VF reset (not scored)
- [GSD-2023-1000109](https://insights.sbomify.com/GSD-2023-1000109/): perf: Fix perf_pending_task() UaF (not scored)
- [GSD-2023-1000108](https://insights.sbomify.com/GSD-2023-1000108/): udf: Fix preallocation discarding at indirect extent boundary (not scored)
- [GSD-2023-1000107](https://insights.sbomify.com/GSD-2023-1000107/): udf: Fix extending file within last block (not scored)
- [GSD-2023-1000106](https://insights.sbomify.com/GSD-2023-1000106/): Bluetooth: L2CAP: Fix u8 overflow (not scored)
- [GSD-2023-1000105](https://insights.sbomify.com/GSD-2023-1000105/): btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (not scored)
- [GSD-2023-1000104](https://insights.sbomify.com/GSD-2023-1000104/): clk: qcom: gdsc: Remove direct runtime PM calls (not scored)
- [GSD-2023-1000103](https://insights.sbomify.com/GSD-2023-1000103/): iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (not scored)
- [GSD-2023-1000102](https://insights.sbomify.com/GSD-2023-1000102/): iio: health: afe4403: Fix oob read in afe4403_read_raw (not scored)
- [GSD-2023-1000101](https://insights.sbomify.com/GSD-2023-1000101/): libbpf: Handle size overflow for ringbuf mmap (not scored)
- [GSD-2023-1000100](https://insights.sbomify.com/GSD-2023-1000100/): hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (not scored)
- [GSD-2023-1000099](https://insights.sbomify.com/GSD-2023-1000099/): clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error (not scored)
- [GSD-2023-1000098](https://insights.sbomify.com/GSD-2023-1000098/): ixgbevf: Fix resource leak in ixgbevf_init_module() (not scored)
- [GSD-2023-1000097](https://insights.sbomify.com/GSD-2023-1000097/): fm10k: Fix error handling in fm10k_init_module() (not scored)
- [GSD-2023-1000096](https://insights.sbomify.com/GSD-2023-1000096/): iavf: Fix error handling in iavf_init_module() (not scored)
- [GSD-2023-1000095](https://insights.sbomify.com/GSD-2023-1000095/): e100: Fix possible use after free in e100_xmit_prepare (not scored)
- [GSD-2023-1000094](https://insights.sbomify.com/GSD-2023-1000094/): net/mlx5e: Fix use-after-free when reverting termination table (not scored)
- [GSD-2023-1000093](https://insights.sbomify.com/GSD-2023-1000093/): can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (not scored)
- [GSD-2023-1000092](https://insights.sbomify.com/GSD-2023-1000092/): wifi: cfg80211: fix buffer overflow in elem comparison (not scored)
- [GSD-2023-1000091](https://insights.sbomify.com/GSD-2023-1000091/): wifi: cfg80211: don't allow multi-BSSID in S1G (not scored)
- [GSD-2023-1000090](https://insights.sbomify.com/GSD-2023-1000090/): wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (not scored)
- [GSD-2023-1000089](https://insights.sbomify.com/GSD-2023-1000089/): net: phy: fix null-ptr-deref while probe() failed (not scored)
- [GSD-2023-1000088](https://insights.sbomify.com/GSD-2023-1000088/): net/9p: Fix a potential socket leak in p9_socket_open (not scored)
- [GSD-2023-1000087](https://insights.sbomify.com/GSD-2023-1000087/): net: ethernet: nixge: fix NULL dereference (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/119/