# Vulnerabilities published in 2023


- [CVE-2023-54252](https://insights.sbomify.com/CVE-2023-54252/): platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (not scored)
- [CVE-2023-54251](https://insights.sbomify.com/CVE-2023-54251/): net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. (not scored)
- [CVE-2023-54250](https://insights.sbomify.com/CVE-2023-54250/): ksmbd: avoid out of bounds access in decode_preauth_ctxt() (high 8.2)
- [CVE-2023-5425](https://insights.sbomify.com/CVE-2023-5425/): Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation (high 8.8)
- [CVE-2023-54249](https://insights.sbomify.com/CVE-2023-54249/): bus: mhi: ep: Only send -ENOTCONN status if client driver is available (not scored)
- [CVE-2023-54248](https://insights.sbomify.com/CVE-2023-54248/): fs/ntfs3: Add check for kmemdup (not scored)
- [CVE-2023-54247](https://insights.sbomify.com/CVE-2023-54247/): bpf: Silence a warning in btf_type_id_size() (not scored)
- [CVE-2023-54246](https://insights.sbomify.com/CVE-2023-54246/): rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() (not scored)
- [CVE-2023-54245](https://insights.sbomify.com/CVE-2023-54245/): ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (not scored)
- [CVE-2023-54244](https://insights.sbomify.com/CVE-2023-54244/): ACPI: EC: Fix oops when removing custom query handlers (not scored)
- [CVE-2023-54243](https://insights.sbomify.com/CVE-2023-54243/): netfilter: ebtables: fix table blob use-after-free (high 7.8)
- [CVE-2023-54242](https://insights.sbomify.com/CVE-2023-54242/): block, bfq: Fix division by zero error on zero wsum (not scored)
- [CVE-2023-54241](https://insights.sbomify.com/CVE-2023-54241/): MIPS: KVM: Fix NULL pointer dereference (not scored)
- [CVE-2023-54240](https://insights.sbomify.com/CVE-2023-54240/): net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (not scored)
- [CVE-2023-5424](https://insights.sbomify.com/CVE-2023-5424/): WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection (medium 4.7)
- [CVE-2023-54239](https://insights.sbomify.com/CVE-2023-54239/): iommufd: Check for uptr overflow (not scored)
- [CVE-2023-54238](https://insights.sbomify.com/CVE-2023-54238/): mlx5: fix skb leak while fifo resync and push (high 7.8)
- [CVE-2023-54237](https://insights.sbomify.com/CVE-2023-54237/): net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() (critical 9.8)
- [CVE-2023-54236](https://insights.sbomify.com/CVE-2023-54236/): net/net_failover: fix txq exceeding warning (not scored)
- [CVE-2023-54235](https://insights.sbomify.com/CVE-2023-54235/): PCI/DOE: Fix destroy_work_on_stack() race (not scored)
- [CVE-2023-54234](https://insights.sbomify.com/CVE-2023-54234/): scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (high 7.8)
- [CVE-2023-54233](https://insights.sbomify.com/CVE-2023-54233/): ASoC: SOF: avoid a NULL dereference with unsupported widgets (not scored)
- [CVE-2023-54232](https://insights.sbomify.com/CVE-2023-54232/): m68k: Only force 030 bus error if PC not in exception table (not scored)
- [CVE-2023-54231](https://insights.sbomify.com/CVE-2023-54231/): net: libwx: fix memory leak in wx_setup_rx_resources (not scored)
- [CVE-2023-54230](https://insights.sbomify.com/CVE-2023-54230/): amba: bus: fix refcount leak (not scored)
- [CVE-2023-5423](https://insights.sbomify.com/CVE-2023-5423/): SourceCodester Online Pizza Ordering System sql injection (medium 4.7)
- [CVE-2023-54229](https://insights.sbomify.com/CVE-2023-54229/): wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range (not scored)
- [CVE-2023-54228](https://insights.sbomify.com/CVE-2023-54228/): regulator: raa215300: Fix resource leak in case of error (not scored)
- [CVE-2023-54227](https://insights.sbomify.com/CVE-2023-54227/): blk-mq: fix tags leak when shrink nr_hw_queues (high 7.5)
- [CVE-2023-54226](https://insights.sbomify.com/CVE-2023-54226/): af_unix: Fix data races around sk->sk_shutdown. (not scored)
- [CVE-2023-54225](https://insights.sbomify.com/CVE-2023-54225/): net: ipa: only reset hashed tables when supported (not scored)
- [CVE-2023-54224](https://insights.sbomify.com/CVE-2023-54224/): btrfs: fix lockdep splat and potential deadlock after failure running delayed items (not scored)
- [CVE-2023-54223](https://insights.sbomify.com/CVE-2023-54223/): net/mlx5e: xsk: Fix invalid buffer access for legacy rq (critical 9.8)
- [CVE-2023-54222](https://insights.sbomify.com/CVE-2023-54222/): hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id() (not scored)
- [CVE-2023-54221](https://insights.sbomify.com/CVE-2023-54221/): clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe (not scored)
- [CVE-2023-54220](https://insights.sbomify.com/CVE-2023-54220/): serial: 8250: Fix oops for port->pm on uart_change_pm() (high 7.8)
- [CVE-2023-5422](https://insights.sbomify.com/CVE-2023-5422/): SSL Certificates are not checked for E-Mail Handling (high 8.7)
- [CVE-2023-54219](https://insights.sbomify.com/CVE-2023-54219/): Revert "IB/isert: Fix incorrect release of isert connection" (high 7.5)
- [CVE-2023-54218](https://insights.sbomify.com/CVE-2023-54218/): net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (not scored)
- [CVE-2023-54217](https://insights.sbomify.com/CVE-2023-54217/): Revert "drm/msm: Add missing check and destroy for alloc_ordered_workqueue" (not scored)
- [CVE-2023-54216](https://insights.sbomify.com/CVE-2023-54216/): net/mlx5e: TC, Fix using eswitch mapping in nic mode (high 7.8)
- [CVE-2023-54215](https://insights.sbomify.com/CVE-2023-54215/): virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() (not scored)
- [CVE-2023-54214](https://insights.sbomify.com/CVE-2023-54214/): Bluetooth: L2CAP: Fix potential user-after-free (high 8.8)
- [CVE-2023-54213](https://insights.sbomify.com/CVE-2023-54213/): USB: sisusbvga: Add endpoint checks (not scored)
- [CVE-2023-54211](https://insights.sbomify.com/CVE-2023-54211/): tracing: Fix warning in trace_buffered_event_disable() (not scored)
- [CVE-2023-54210](https://insights.sbomify.com/CVE-2023-54210/): Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (high 7.8)
- [CVE-2023-5421](https://insights.sbomify.com/CVE-2023-5421/): Possible XSS execution in customer information (low 3.5)
- [CVE-2023-54209](https://insights.sbomify.com/CVE-2023-54209/): block: fix blktrace debugfs entries leakage (not scored)
- [CVE-2023-54208](https://insights.sbomify.com/CVE-2023-54208/): media: ov5675: Fix memleak in ov5675_init_controls() (not scored)
- [CVE-2023-54207](https://insights.sbomify.com/CVE-2023-54207/): HID: uclogic: Correct devm device reference for hidinput input_dev name (high 7.8)
- [CVE-2023-54206](https://insights.sbomify.com/CVE-2023-54206/): net/sched: flower: fix filter idr initialization (high 7.8)
- [CVE-2023-54205](https://insights.sbomify.com/CVE-2023-54205/): pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (not scored)
- [CVE-2023-54204](https://insights.sbomify.com/CVE-2023-54204/): mmc: sunplus: fix return value check of mmc_add_host() (not scored)
- [CVE-2023-54203](https://insights.sbomify.com/CVE-2023-54203/): ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr (critical 9.1)
- [CVE-2023-54202](https://insights.sbomify.com/CVE-2023-54202/): drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (high 7.8)
- [CVE-2023-54201](https://insights.sbomify.com/CVE-2023-54201/): RDMA/efa: Fix wrong resources deallocation order (high 7.8)
- [CVE-2023-54200](https://insights.sbomify.com/CVE-2023-54200/): netfilter: nf_tables: always release netdev hooks from notifier (high 7.8)
- [CVE-2023-54199](https://insights.sbomify.com/CVE-2023-54199/): drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (not scored)
- [CVE-2023-54198](https://insights.sbomify.com/CVE-2023-54198/): tty: fix out-of-bounds access in tty_driver_lookup_tty() (high 7.8)
- [CVE-2023-54197](https://insights.sbomify.com/CVE-2023-54197/): Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" (not scored)
- [CVE-2023-54196](https://insights.sbomify.com/CVE-2023-54196/): fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode' (not scored)
- [CVE-2023-54195](https://insights.sbomify.com/CVE-2023-54195/): rxrpc: Fix timeout of a call that hasn't yet been granted a channel (not scored)
- [CVE-2023-54194](https://insights.sbomify.com/CVE-2023-54194/): exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree (not scored)
- [CVE-2023-54193](https://insights.sbomify.com/CVE-2023-54193/): net/sched: cls_api: remove block_cb from driver_list before freeing (high 7.8)
- [CVE-2023-54192](https://insights.sbomify.com/CVE-2023-54192/): f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block (not scored)
- [CVE-2023-54191](https://insights.sbomify.com/CVE-2023-54191/): wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit (not scored)
- [CVE-2023-54190](https://insights.sbomify.com/CVE-2023-54190/): leds: led-core: Fix refcount leak in of_led_get() (not scored)
- [CVE-2023-5419](https://insights.sbomify.com/CVE-2023-5419/): Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending (medium 4.3)
- [CVE-2023-54189](https://insights.sbomify.com/CVE-2023-54189/): pstore/ram: Add check for kstrdup (not scored)
- [CVE-2023-54188](https://insights.sbomify.com/CVE-2023-54188/): dmaengine: apple-admac: Fix 'current_tx' not getting freed (not scored)
- [CVE-2023-54187](https://insights.sbomify.com/CVE-2023-54187/): f2fs: fix potential corruption when moving a directory (high 7.8)
- [CVE-2023-54186](https://insights.sbomify.com/CVE-2023-54186/): usb: typec: altmodes/displayport: fix pin_assignment_show (high 7.8)
- [CVE-2023-54185](https://insights.sbomify.com/CVE-2023-54185/): btrfs: remove BUG_ON()'s in add_new_free_space() (not scored)
- [CVE-2023-54184](https://insights.sbomify.com/CVE-2023-54184/): scsi: target: iscsit: Free cmds before session free (critical 9.8)
- [CVE-2023-54183](https://insights.sbomify.com/CVE-2023-54183/): media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (not scored)
- [CVE-2023-54182](https://insights.sbomify.com/CVE-2023-54182/): f2fs: fix to check readonly condition correctly (high 7.1)
- [CVE-2023-54181](https://insights.sbomify.com/CVE-2023-54181/): bpf: Fix issue in verifying allow_ptr_leaks (not scored)
- [CVE-2023-54180](https://insights.sbomify.com/CVE-2023-54180/): btrfs: handle case when repair happens with dev-replace (not scored)
- [CVE-2023-54179](https://insights.sbomify.com/CVE-2023-54179/): scsi: qla2xxx: Array index may go out of bound (not scored)
- [CVE-2023-54178](https://insights.sbomify.com/CVE-2023-54178/): of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (not scored)
- [CVE-2023-54177](https://insights.sbomify.com/CVE-2023-54177/): quota: fix warning in dqgrab() (not scored)
- [CVE-2023-54176](https://insights.sbomify.com/CVE-2023-54176/): mptcp: stricter state check in mptcp_worker (not scored)
- [CVE-2023-54175](https://insights.sbomify.com/CVE-2023-54175/): i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path (not scored)
- [CVE-2023-54174](https://insights.sbomify.com/CVE-2023-54174/): vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd (not scored)
- [CVE-2023-54173](https://insights.sbomify.com/CVE-2023-54173/): bpf: Disable preemption in bpf_event_output (high 7.8)
- [CVE-2023-54172](https://insights.sbomify.com/CVE-2023-54172/): x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction (not scored)
- [CVE-2023-54171](https://insights.sbomify.com/CVE-2023-54171/): tracing: Fix memory leak of iter->temp when reading trace_pipe (not scored)
- [CVE-2023-54170](https://insights.sbomify.com/CVE-2023-54170/): keys: Fix linking a duplicate key to a keyring's assoc_array (not scored)
- [CVE-2023-5417](https://insights.sbomify.com/CVE-2023-5417/): Funnelforms Free <= 3.4 - Missing Authorization to Category Update (medium 4.3)
- [CVE-2023-54169](https://insights.sbomify.com/CVE-2023-54169/): net/mlx5e: fix memory leak in mlx5e_ptp_open (not scored)
- [CVE-2023-54168](https://insights.sbomify.com/CVE-2023-54168/): RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (high 7.8)
- [CVE-2023-54167](https://insights.sbomify.com/CVE-2023-54167/): m68k: mm: Move initrd phys_to_virt handling after paging_init() (not scored)
- [CVE-2023-54166](https://insights.sbomify.com/CVE-2023-54166/): igc: Fix Kernel Panic during ndo_tx_timeout callback (high 7.8)
- [CVE-2023-54165](https://insights.sbomify.com/CVE-2023-54165/): zsmalloc: move LRU update from zs_map_object() to zs_malloc() (high 7.8)
- [CVE-2023-54164](https://insights.sbomify.com/CVE-2023-54164/): Bluetooth: ISO: fix iso_conn related locking and validity issues (high 8.0)
- [CVE-2023-54163](https://insights.sbomify.com/CVE-2023-54163/): NLB mKlik Macedonia 3.3.12 SQL Injection via International Transfer Parameters (high 8.8)
- [CVE-2023-54162](https://insights.sbomify.com/CVE-2023-54162/): ksmbd: fix possible memory leak in smb2_lock() (high 8.8)
- [CVE-2023-54160](https://insights.sbomify.com/CVE-2023-54160/): firmware: arm_sdei: Fix sleep from invalid context BUG (not scored)
- [CVE-2023-5416](https://insights.sbomify.com/CVE-2023-5416/): Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion (medium 4.3)
- [CVE-2023-54159](https://insights.sbomify.com/CVE-2023-54159/): usb: mtu3: fix kernel panic at qmu transfer done irq handler (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/142/