# Vulnerabilities published in 2023


- [GSD-2023-1000086](https://insights.sbomify.com/GSD-2023-1000086/): mptcp: fix sleep in atomic at close time (not scored)
- [GSD-2023-1000085](https://insights.sbomify.com/GSD-2023-1000085/): tipc: re-fetch skb cb after tipc_msg_validate (not scored)
- [GSD-2023-1000084](https://insights.sbomify.com/GSD-2023-1000084/): net: mdiobus: fix unbalanced node reference count (not scored)
- [GSD-2023-1000083](https://insights.sbomify.com/GSD-2023-1000083/): net: hsr: Fix potential use-after-free (not scored)
- [GSD-2023-1000082](https://insights.sbomify.com/GSD-2023-1000082/): net: tun: Fix use-after-free in tun_detach() (not scored)
- [GSD-2023-1000081](https://insights.sbomify.com/GSD-2023-1000081/): sctp: fix memory leak in sctp_stream_outq_migrate() (not scored)
- [GSD-2023-1000080](https://insights.sbomify.com/GSD-2023-1000080/): afs: Fix server->active leak in afs_put_server (not scored)
- [GSD-2023-1000079](https://insights.sbomify.com/GSD-2023-1000079/): hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (not scored)
- [GSD-2023-1000078](https://insights.sbomify.com/GSD-2023-1000078/): hwmon: (coretemp) Check for null before removing sysfs attrs (not scored)
- [GSD-2023-1000077](https://insights.sbomify.com/GSD-2023-1000077/): hwmon: (asus-ec-sensors) Add checks for devm_kcalloc (not scored)
- [GSD-2023-1000076](https://insights.sbomify.com/GSD-2023-1000076/): can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down (not scored)
- [GSD-2023-1000075](https://insights.sbomify.com/GSD-2023-1000075/): nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (not scored)
- [GSD-2023-1000074](https://insights.sbomify.com/GSD-2023-1000074/): tracing: Free buffers when a used dynamic event is removed (not scored)
- [GSD-2023-1000073](https://insights.sbomify.com/GSD-2023-1000073/): ASoC: ops: Fix bounds check for _sx controls (not scored)
- [GSD-2023-1000072](https://insights.sbomify.com/GSD-2023-1000072/): riscv: Sync efi page table's kernel mappings before switching (not scored)
- [GSD-2023-1000071](https://insights.sbomify.com/GSD-2023-1000071/): Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (not scored)
- [GSD-2023-1000070](https://insights.sbomify.com/GSD-2023-1000070/): drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame (not scored)
- [GSD-2023-1000069](https://insights.sbomify.com/GSD-2023-1000069/): nvme: fix SRCU protection of nvme_ns_head list (not scored)
- [GSD-2023-1000068](https://insights.sbomify.com/GSD-2023-1000068/): iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (not scored)
- [GSD-2023-1000067](https://insights.sbomify.com/GSD-2023-1000067/): riscv: fix race when vmap stack overflow (not scored)
- [GSD-2023-1000066](https://insights.sbomify.com/GSD-2023-1000066/): iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (not scored)
- [GSD-2023-1000065](https://insights.sbomify.com/GSD-2023-1000065/): ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (not scored)
- [GSD-2023-1000064](https://insights.sbomify.com/GSD-2023-1000064/): powerpc/bpf/32: Fix Oops on tail call tests (not scored)
- [GSD-2023-1000063](https://insights.sbomify.com/GSD-2023-1000063/): char: tpm: Protect tpm_pm_suspend with locks (not scored)
- [GSD-2023-1000062](https://insights.sbomify.com/GSD-2023-1000062/): mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes() (not scored)
- [GSD-2023-1000061](https://insights.sbomify.com/GSD-2023-1000061/): Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (not scored)
- [GSD-2023-1000060](https://insights.sbomify.com/GSD-2023-1000060/): ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (not scored)
- [GSD-2023-1000059](https://insights.sbomify.com/GSD-2023-1000059/): ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (not scored)
- [GSD-2023-1000058](https://insights.sbomify.com/GSD-2023-1000058/): fbcon: Use kzalloc() in fbcon_prepare_logo() (not scored)
- [GSD-2023-1000057](https://insights.sbomify.com/GSD-2023-1000057/): ASoC: soc-pcm: Add NULL check in BE reparenting (not scored)
- [GSD-2023-1000056](https://insights.sbomify.com/GSD-2023-1000056/): mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (not scored)
- [GSD-2023-1000055](https://insights.sbomify.com/GSD-2023-1000055/): mm/khugepaged: take the right locks for page table retraction (not scored)
- [GSD-2023-1000054](https://insights.sbomify.com/GSD-2023-1000054/): net/mlx5: Lag, avoid lockdep warnings (not scored)
- [GSD-2023-1000053](https://insights.sbomify.com/GSD-2023-1000053/): xen/netback: Ensure protocol headers don't fall in the non-linear area (not scored)
- [GSD-2023-1000052](https://insights.sbomify.com/GSD-2023-1000052/): drm/amdgpu: fix use-after-free during gpu recovery (not scored)
- [GSD-2023-1000051](https://insights.sbomify.com/GSD-2023-1000051/): xen/netback: don't call kfree_skb() with interrupts disabled (not scored)
- [GSD-2023-1000050](https://insights.sbomify.com/GSD-2023-1000050/): fscache: Fix oops due to race with cookie_lru and use_cookie (not scored)
- [GSD-2023-1000049](https://insights.sbomify.com/GSD-2023-1000049/): memcg: fix possible use-after-free in memcg_write_event_control() (not scored)
- [GSD-2023-1000048](https://insights.sbomify.com/GSD-2023-1000048/): media: v4l2-dv-timings.c: fix too strict blanking sanity checks (not scored)
- [GSD-2023-1000047](https://insights.sbomify.com/GSD-2023-1000047/): mm/gup: fix gup_pud_range() for dax (not scored)
- [GSD-2023-1000046](https://insights.sbomify.com/GSD-2023-1000046/): net: mana: Fix race on per-CQ variable napi work_done (not scored)
- [GSD-2023-1000045](https://insights.sbomify.com/GSD-2023-1000045/): can: slcan: fix freed work crash (not scored)
- [GSD-2023-1000044](https://insights.sbomify.com/GSD-2023-1000044/): io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (not scored)
- [GSD-2023-1000043](https://insights.sbomify.com/GSD-2023-1000043/): Bluetooth: Fix crash when replugging CSR fake controllers (not scored)
- [GSD-2023-1000042](https://insights.sbomify.com/GSD-2023-1000042/): drm/shmem-helper: Remove errant put in error path (not scored)
- [GSD-2023-1000041](https://insights.sbomify.com/GSD-2023-1000041/): net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (not scored)
- [GSD-2023-1000040](https://insights.sbomify.com/GSD-2023-1000040/): drm/amd/display: fix array index out of bound error in DCN32 DML (not scored)
- [GSD-2023-1000039](https://insights.sbomify.com/GSD-2023-1000039/): HID: core: fix shift-out-of-bounds in hid_report_raw_event (not scored)
- [GSD-2023-1000038](https://insights.sbomify.com/GSD-2023-1000038/): can: af_can: fix NULL pointer dereference in can_rcv_filter (not scored)
- [GSD-2023-1000037](https://insights.sbomify.com/GSD-2023-1000037/): netfilter: flowtable_offload: fix using __this_cpu_add in preemptible (not scored)
- [GSD-2023-1000036](https://insights.sbomify.com/GSD-2023-1000036/): gpiolib: fix memory leak in gpiochip_setup_dev() (not scored)
- [GSD-2023-1000035](https://insights.sbomify.com/GSD-2023-1000035/): netfilter: conntrack: fix using __this_cpu_add in preemptible (not scored)
- [GSD-2023-1000034](https://insights.sbomify.com/GSD-2023-1000034/): gpio: amd8111: Fix PCI device reference count leak (not scored)
- [GSD-2023-1000033](https://insights.sbomify.com/GSD-2023-1000033/): netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark (not scored)
- [GSD-2023-1000032](https://insights.sbomify.com/GSD-2023-1000032/): mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (not scored)
- [GSD-2023-1000031](https://insights.sbomify.com/GSD-2023-1000031/): Bluetooth: Fix not cleanup led when bt_init fails (not scored)
- [GSD-2023-1000030](https://insights.sbomify.com/GSD-2023-1000030/): af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (not scored)
- [GSD-2023-1000029](https://insights.sbomify.com/GSD-2023-1000029/): xen-netfront: Fix NULL sring after live migration (not scored)
- [GSD-2023-1000028](https://insights.sbomify.com/GSD-2023-1000028/): octeontx2-pf: Fix potential memory leak in otx2_init_tc() (not scored)
- [GSD-2023-1000027](https://insights.sbomify.com/GSD-2023-1000027/): NFC: nci: Bounds check struct nfc_target arrays (not scored)
- [GSD-2023-1000026](https://insights.sbomify.com/GSD-2023-1000026/): net: mvneta: Prevent out of bounds read in mvneta_config_rss() (not scored)
- [GSD-2023-1000025](https://insights.sbomify.com/GSD-2023-1000025/): gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() (not scored)
- [GSD-2023-1000024](https://insights.sbomify.com/GSD-2023-1000024/): ravb: Fix potential use-after-free in ravb_rx_gbeth() (not scored)
- [GSD-2023-1000023](https://insights.sbomify.com/GSD-2023-1000023/): net: wwan: iosm: fix memory leak in ipc_mux_init() (not scored)
- [GSD-2023-1000022](https://insights.sbomify.com/GSD-2023-1000022/): net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (not scored)
- [GSD-2023-1000021](https://insights.sbomify.com/GSD-2023-1000021/): net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (not scored)
- [GSD-2023-1000020](https://insights.sbomify.com/GSD-2023-1000020/): net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (not scored)
- [GSD-2023-1000019](https://insights.sbomify.com/GSD-2023-1000019/): net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (not scored)
- [GSD-2023-1000018](https://insights.sbomify.com/GSD-2023-1000018/): tipc: call tipc_lxc_xmit without holding node_read_lock (not scored)
- [GSD-2023-1000017](https://insights.sbomify.com/GSD-2023-1000017/): ethernet: aeroflex: fix potential skb leak in greth_init_rings() (not scored)
- [GSD-2023-1000016](https://insights.sbomify.com/GSD-2023-1000016/): dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (not scored)
- [GSD-2023-1000015](https://insights.sbomify.com/GSD-2023-1000015/): ipv6: avoid use-after-free in ip6_fragment() (not scored)
- [GSD-2023-1000014](https://insights.sbomify.com/GSD-2023-1000014/): net: mvneta: Fix an out of bounds check (not scored)
- [GSD-2023-1000013](https://insights.sbomify.com/GSD-2023-1000013/): net: thunderbolt: fix memory leak in tbnet_open() (not scored)
- [GSD-2023-1000012](https://insights.sbomify.com/GSD-2023-1000012/): s390/qeth: fix use-after-free in hsci (not scored)
- [GSD-2023-1000011](https://insights.sbomify.com/GSD-2023-1000011/): rtc: cmos: Fix event handler registration ordering issue (not scored)
- [GSD-2023-1000010](https://insights.sbomify.com/GSD-2023-1000010/): PCI: mt7621: Add sentinel to quirks table (not scored)
- [GSD-2023-1000009](https://insights.sbomify.com/GSD-2023-1000009/): ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (not scored)
- [GSD-2023-1000008](https://insights.sbomify.com/GSD-2023-1000008/): pinctrl: meditatek: Startup with the IRQs disabled (not scored)
- [GSD-2023-1000007](https://insights.sbomify.com/GSD-2023-1000007/): perf: Fix perf_pending_task() UaF (not scored)
- [GSD-2023-1000006](https://insights.sbomify.com/GSD-2023-1000006/): udf: Discard preallocation before extending file with a hole (not scored)
- [GSD-2023-1000005](https://insights.sbomify.com/GSD-2023-1000005/): igb: Initialize mailbox message for VF reset (not scored)
- [GSD-2023-1000004](https://insights.sbomify.com/GSD-2023-1000004/): usb: gadget: uvc: Prevent buffer overflow in setup handler (not scored)
- [GSD-2023-1000003](https://insights.sbomify.com/GSD-2023-1000003/): udf: Fix extending file within last block (not scored)
- [GSD-2023-1000002](https://insights.sbomify.com/GSD-2023-1000002/): Bluetooth: L2CAP: Fix u8 overflow (not scored)
- [GSD-2023-1000001](https://insights.sbomify.com/GSD-2023-1000001/): udf: Fix preallocation discarding at indirect extent boundary (not scored)
- [GO-2023-1860](https://insights.sbomify.com/GO-2023-1860/): IBC protocol "Huckleberry" vulnerability in github.com/cosmos/ibc-go (not scored)
- [GHSA-xxmq-4vph-956w](https://insights.sbomify.com/GHSA-xxmq-4vph-956w/): Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048) (not scored)
- [GHSA-xwhj-pqcg-8rcr](https://insights.sbomify.com/GHSA-xwhj-pqcg-8rcr/): CakePHP vulnerable to Cross-site Scripting in some development error pages (not scored)
- [GHSA-xw5j-gv2g-mjm2](https://insights.sbomify.com/GHSA-xw5j-gv2g-mjm2/): Miscompilation in cortex-m-rt 0.7.1 and 0.7.2 (not scored)
- [GHSA-xv3q-jrmm-4fxv](https://insights.sbomify.com/GHSA-xv3q-jrmm-4fxv/): Authentication Bypass in @strapi/plugin-users-permissions (not scored)
- [GHSA-xqcq-j8w9-3pxv](https://insights.sbomify.com/GHSA-xqcq-j8w9-3pxv/): Jettison parser crash by stackoverflow (not scored)
- [GHSA-xpw8-rcwv-8f8p](https://insights.sbomify.com/GHSA-xpw8-rcwv-8f8p/): io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack (not scored)
- [GHSA-xphf-cx8h-7q9g](https://insights.sbomify.com/GHSA-xphf-cx8h-7q9g/): `openssl` `X509StoreRef::objects` is unsound (not scored)
- [GHSA-xm7x-f3w2-4hjm](https://insights.sbomify.com/GHSA-xm7x-f3w2-4hjm/): Presto JDBC Server-Side Request Forgery by redirect (not scored)
- [GHSA-x9qq-236j-gj97](https://insights.sbomify.com/GHSA-x9qq-236j-gj97/): If a user has restricted access to a project that is configured with `restricted=true`, they can gain root access on the system (not scored)
- [GHSA-x5j2-g63m-f8g4](https://insights.sbomify.com/GHSA-x5j2-g63m-f8g4/): KyberSlash: division timings depending on secrets (not scored)
- [GHSA-x563-6hqv-26mr](https://insights.sbomify.com/GHSA-x563-6hqv-26mr/): Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file (not scored)
- [GHSA-x477-fq37-q5wr](https://insights.sbomify.com/GHSA-x477-fq37-q5wr/): Initial debug-host handler implementation could leak information and facilitate denial of service (not scored)
- [GHSA-wxwq-525w-hcqx](https://insights.sbomify.com/GHSA-wxwq-525w-hcqx/): Yapscan Denial of Service vulnerability in report server (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/120/