Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 120 of 430.
- GSD-2023-1000086 mptcp: fix sleep in atomic at close time
- GSD-2023-1000085 tipc: re-fetch skb cb after tipc_msg_validate
- GSD-2023-1000084 net: mdiobus: fix unbalanced node reference count
- GSD-2023-1000083 net: hsr: Fix potential use-after-free
- GSD-2023-1000082 net: tun: Fix use-after-free in tun_detach()
- GSD-2023-1000081 sctp: fix memory leak in sctp_stream_outq_migrate()
- GSD-2023-1000080 afs: Fix server->active leak in afs_put_server
- GSD-2023-1000079 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- GSD-2023-1000078 hwmon: (coretemp) Check for null before removing sysfs attrs
- GSD-2023-1000077 hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
- GSD-2023-1000076 can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down
- GSD-2023-1000075 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- GSD-2023-1000074 tracing: Free buffers when a used dynamic event is removed
- GSD-2023-1000073 ASoC: ops: Fix bounds check for _sx controls
- GSD-2023-1000072 riscv: Sync efi page table's kernel mappings before switching
- GSD-2023-1000071 Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
- GSD-2023-1000070 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
- GSD-2023-1000069 nvme: fix SRCU protection of nvme_ns_head list
- GSD-2023-1000068 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
- GSD-2023-1000067 riscv: fix race when vmap stack overflow
- GSD-2023-1000066 iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
- GSD-2023-1000065 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
- GSD-2023-1000064 powerpc/bpf/32: Fix Oops on tail call tests
- GSD-2023-1000063 char: tpm: Protect tpm_pm_suspend with locks
- GSD-2023-1000062 mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()
- GSD-2023-1000061 Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- GSD-2023-1000060 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- GSD-2023-1000059 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
- GSD-2023-1000058 fbcon: Use kzalloc() in fbcon_prepare_logo()
- GSD-2023-1000057 ASoC: soc-pcm: Add NULL check in BE reparenting
- GSD-2023-1000056 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- GSD-2023-1000055 mm/khugepaged: take the right locks for page table retraction
- GSD-2023-1000054 net/mlx5: Lag, avoid lockdep warnings
- GSD-2023-1000053 xen/netback: Ensure protocol headers don't fall in the non-linear area
- GSD-2023-1000052 drm/amdgpu: fix use-after-free during gpu recovery
- GSD-2023-1000051 xen/netback: don't call kfree_skb() with interrupts disabled
- GSD-2023-1000050 fscache: Fix oops due to race with cookie_lru and use_cookie
- GSD-2023-1000049 memcg: fix possible use-after-free in memcg_write_event_control()
- GSD-2023-1000048 media: v4l2-dv-timings.c: fix too strict blanking sanity checks
- GSD-2023-1000047 mm/gup: fix gup_pud_range() for dax
- GSD-2023-1000046 net: mana: Fix race on per-CQ variable napi work_done
- GSD-2023-1000045 can: slcan: fix freed work crash
- GSD-2023-1000044 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()
- GSD-2023-1000043 Bluetooth: Fix crash when replugging CSR fake controllers
- GSD-2023-1000042 drm/shmem-helper: Remove errant put in error path
- GSD-2023-1000041 net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()
- GSD-2023-1000040 drm/amd/display: fix array index out of bound error in DCN32 DML
- GSD-2023-1000039 HID: core: fix shift-out-of-bounds in hid_report_raw_event
- GSD-2023-1000038 can: af_can: fix NULL pointer dereference in can_rcv_filter
- GSD-2023-1000037 netfilter: flowtable_offload: fix using __this_cpu_add in preemptible
- GSD-2023-1000036 gpiolib: fix memory leak in gpiochip_setup_dev()
- GSD-2023-1000035 netfilter: conntrack: fix using __this_cpu_add in preemptible
- GSD-2023-1000034 gpio: amd8111: Fix PCI device reference count leak
- GSD-2023-1000033 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
- GSD-2023-1000032 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- GSD-2023-1000031 Bluetooth: Fix not cleanup led when bt_init fails
- GSD-2023-1000030 af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- GSD-2023-1000029 xen-netfront: Fix NULL sring after live migration
- GSD-2023-1000028 octeontx2-pf: Fix potential memory leak in otx2_init_tc()
- GSD-2023-1000027 NFC: nci: Bounds check struct nfc_target arrays
- GSD-2023-1000026 net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- GSD-2023-1000025 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
- GSD-2023-1000024 ravb: Fix potential use-after-free in ravb_rx_gbeth()
- GSD-2023-1000023 net: wwan: iosm: fix memory leak in ipc_mux_init()
- GSD-2023-1000022 net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- GSD-2023-1000021 net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- GSD-2023-1000020 net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- GSD-2023-1000019 net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
- GSD-2023-1000018 tipc: call tipc_lxc_xmit without holding node_read_lock
- GSD-2023-1000017 ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- GSD-2023-1000016 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()
- GSD-2023-1000015 ipv6: avoid use-after-free in ip6_fragment()
- GSD-2023-1000014 net: mvneta: Fix an out of bounds check
- GSD-2023-1000013 net: thunderbolt: fix memory leak in tbnet_open()
- GSD-2023-1000012 s390/qeth: fix use-after-free in hsci
- GSD-2023-1000011 rtc: cmos: Fix event handler registration ordering issue
- GSD-2023-1000010 PCI: mt7621: Add sentinel to quirks table
- GSD-2023-1000009 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
- GSD-2023-1000008 pinctrl: meditatek: Startup with the IRQs disabled
- GSD-2023-1000007 perf: Fix perf_pending_task() UaF
- GSD-2023-1000006 udf: Discard preallocation before extending file with a hole
- GSD-2023-1000005 igb: Initialize mailbox message for VF reset
- GSD-2023-1000004 usb: gadget: uvc: Prevent buffer overflow in setup handler
- GSD-2023-1000003 udf: Fix extending file within last block
- GSD-2023-1000002 Bluetooth: L2CAP: Fix u8 overflow
- GSD-2023-1000001 udf: Fix preallocation discarding at indirect extent boundary
- GO-2023-1860 IBC protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-go
- GHSA-xxmq-4vph-956w Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
- GHSA-xwhj-pqcg-8rcr CakePHP vulnerable to Cross-site Scripting in some development error pages
- GHSA-xw5j-gv2g-mjm2 Miscompilation in cortex-m-rt 0.7.1 and 0.7.2
- GHSA-xv3q-jrmm-4fxv Authentication Bypass in @strapi/plugin-users-permissions
- GHSA-xqcq-j8w9-3pxv Jettison parser crash by stackoverflow
- GHSA-xpw8-rcwv-8f8p io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
- GHSA-xphf-cx8h-7q9g `openssl` `X509StoreRef::objects` is unsound
- GHSA-xm7x-f3w2-4hjm Presto JDBC Server-Side Request Forgery by redirect
- GHSA-x9qq-236j-gj97 If a user has restricted access to a project that is configured with `restricted=true`, they can gain root access on the system
- GHSA-x5j2-g63m-f8g4 KyberSlash: division timings depending on secrets
- GHSA-x563-6hqv-26mr Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file
- GHSA-x477-fq37-q5wr Initial debug-host handler implementation could leak information and facilitate denial of service
- GHSA-wxwq-525w-hcqx Yapscan Denial of Service vulnerability in report server