Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 142 of 430.
- CVE-2023-54252 platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings
- CVE-2023-54251 net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- CVE-2023-54250 ksmbd: avoid out of bounds access in decode_preauth_ctxt()
- CVE-2023-5425 Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
- CVE-2023-54249 bus: mhi: ep: Only send -ENOTCONN status if client driver is available
- CVE-2023-54248 fs/ntfs3: Add check for kmemdup
- CVE-2023-54247 bpf: Silence a warning in btf_type_id_size()
- CVE-2023-54246 rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()
- CVE-2023-54245 ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
- CVE-2023-54244 ACPI: EC: Fix oops when removing custom query handlers
- CVE-2023-54243 netfilter: ebtables: fix table blob use-after-free
- CVE-2023-54242 block, bfq: Fix division by zero error on zero wsum
- CVE-2023-54241 MIPS: KVM: Fix NULL pointer dereference
- CVE-2023-54240 net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
- CVE-2023-5424 WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
- CVE-2023-54239 iommufd: Check for uptr overflow
- CVE-2023-54238 mlx5: fix skb leak while fifo resync and push
- CVE-2023-54237 net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- CVE-2023-54236 net/net_failover: fix txq exceeding warning
- CVE-2023-54235 PCI/DOE: Fix destroy_work_on_stack() race
- CVE-2023-54234 scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization
- CVE-2023-54233 ASoC: SOF: avoid a NULL dereference with unsupported widgets
- CVE-2023-54232 m68k: Only force 030 bus error if PC not in exception table
- CVE-2023-54231 net: libwx: fix memory leak in wx_setup_rx_resources
- CVE-2023-54230 amba: bus: fix refcount leak
- CVE-2023-5423 SourceCodester Online Pizza Ordering System sql injection
- CVE-2023-54229 wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
- CVE-2023-54228 regulator: raa215300: Fix resource leak in case of error
- CVE-2023-54227 blk-mq: fix tags leak when shrink nr_hw_queues
- CVE-2023-54226 af_unix: Fix data races around sk->sk_shutdown.
- CVE-2023-54225 net: ipa: only reset hashed tables when supported
- CVE-2023-54224 btrfs: fix lockdep splat and potential deadlock after failure running delayed items
- CVE-2023-54223 net/mlx5e: xsk: Fix invalid buffer access for legacy rq
- CVE-2023-54222 hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
- CVE-2023-54221 clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
- CVE-2023-54220 serial: 8250: Fix oops for port->pm on uart_change_pm()
- CVE-2023-5422 SSL Certificates are not checked for E-Mail Handling
- CVE-2023-54219 Revert "IB/isert: Fix incorrect release of isert connection"
- CVE-2023-54218 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- CVE-2023-54217 Revert "drm/msm: Add missing check and destroy for alloc_ordered_workqueue"
- CVE-2023-54216 net/mlx5e: TC, Fix using eswitch mapping in nic mode
- CVE-2023-54215 virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs()
- CVE-2023-54214 Bluetooth: L2CAP: Fix potential user-after-free
- CVE-2023-54213 USB: sisusbvga: Add endpoint checks
- CVE-2023-54211 tracing: Fix warning in trace_buffered_event_disable()
- CVE-2023-54210 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor()
- CVE-2023-5421 Possible XSS execution in customer information
- CVE-2023-54209 block: fix blktrace debugfs entries leakage
- CVE-2023-54208 media: ov5675: Fix memleak in ov5675_init_controls()
- CVE-2023-54207 HID: uclogic: Correct devm device reference for hidinput input_dev name
- CVE-2023-54206 net/sched: flower: fix filter idr initialization
- CVE-2023-54205 pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
- CVE-2023-54204 mmc: sunplus: fix return value check of mmc_add_host()
- CVE-2023-54203 ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
- CVE-2023-54202 drm/i915: fix race condition UAF in i915_perf_add_config_ioctl
- CVE-2023-54201 RDMA/efa: Fix wrong resources deallocation order
- CVE-2023-54200 netfilter: nf_tables: always release netdev hooks from notifier
- CVE-2023-54199 drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
- CVE-2023-54198 tty: fix out-of-bounds access in tty_driver_lookup_tty()
- CVE-2023-54197 Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
- CVE-2023-54196 fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode'
- CVE-2023-54195 rxrpc: Fix timeout of a call that hasn't yet been granted a channel
- CVE-2023-54194 exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
- CVE-2023-54193 net/sched: cls_api: remove block_cb from driver_list before freeing
- CVE-2023-54192 f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block
- CVE-2023-54191 wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit
- CVE-2023-54190 leds: led-core: Fix refcount leak in of_led_get()
- CVE-2023-5419 Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending
- CVE-2023-54189 pstore/ram: Add check for kstrdup
- CVE-2023-54188 dmaengine: apple-admac: Fix 'current_tx' not getting freed
- CVE-2023-54187 f2fs: fix potential corruption when moving a directory
- CVE-2023-54186 usb: typec: altmodes/displayport: fix pin_assignment_show
- CVE-2023-54185 btrfs: remove BUG_ON()'s in add_new_free_space()
- CVE-2023-54184 scsi: target: iscsit: Free cmds before session free
- CVE-2023-54183 media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
- CVE-2023-54182 f2fs: fix to check readonly condition correctly
- CVE-2023-54181 bpf: Fix issue in verifying allow_ptr_leaks
- CVE-2023-54180 btrfs: handle case when repair happens with dev-replace
- CVE-2023-54179 scsi: qla2xxx: Array index may go out of bound
- CVE-2023-54178 of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()
- CVE-2023-54177 quota: fix warning in dqgrab()
- CVE-2023-54176 mptcp: stricter state check in mptcp_worker
- CVE-2023-54175 i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
- CVE-2023-54174 vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd
- CVE-2023-54173 bpf: Disable preemption in bpf_event_output
- CVE-2023-54172 x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
- CVE-2023-54171 tracing: Fix memory leak of iter->temp when reading trace_pipe
- CVE-2023-54170 keys: Fix linking a duplicate key to a keyring's assoc_array
- CVE-2023-5417 Funnelforms Free <= 3.4 - Missing Authorization to Category Update
- CVE-2023-54169 net/mlx5e: fix memory leak in mlx5e_ptp_open
- CVE-2023-54168 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
- CVE-2023-54167 m68k: mm: Move initrd phys_to_virt handling after paging_init()
- CVE-2023-54166 igc: Fix Kernel Panic during ndo_tx_timeout callback
- CVE-2023-54165 zsmalloc: move LRU update from zs_map_object() to zs_malloc()
- CVE-2023-54164 Bluetooth: ISO: fix iso_conn related locking and validity issues
- CVE-2023-54163 NLB mKlik Macedonia 3.3.12 SQL Injection via International Transfer Parameters
- CVE-2023-54162 ksmbd: fix possible memory leak in smb2_lock()
- CVE-2023-54160 firmware: arm_sdei: Fix sleep from invalid context BUG
- CVE-2023-5416 Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion
- CVE-2023-54159 usb: mtu3: fix kernel panic at qmu transfer done irq handler