Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 143 of 430.
- CVE-2023-54158 btrfs: don't free qgroup space unless specified
- CVE-2023-54157 binder: fix UAF of alloc->vma in race with munmap()
- CVE-2023-54156 sfc: fix crash when reading stats while NIC is resetting
- CVE-2023-54155 net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
- CVE-2023-54154 scsi: target: core: Fix target_cmd_counter leak
- CVE-2023-54153 ext4: turn quotas off if mount failed after enabling quotas
- CVE-2023-54152 can: j1939: prevent deadlock by moving j1939_sk_errqueue()
- CVE-2023-54151 f2fs: Fix system crash due to lack of free space in LFS
- CVE-2023-54150 drm/amd: Fix an out of bounds error in BIOS parser
- CVE-2023-5415 Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation
- CVE-2023-54149 net: dsa: avoid suspicious RCU usage for synced VLAN-aware MAC addresses
- CVE-2023-54148 net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
- CVE-2023-54147 media: platform: mtk-mdp3: Add missing check and free for ida_alloc
- CVE-2023-54146 x86/kexec: Fix double-free of elf header buffer
- CVE-2023-54145 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- CVE-2023-54144 drm/amdkfd: Fix kernel warning during topology setup
- CVE-2023-54143 media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()
- CVE-2023-54142 gtp: Fix use-after-free in __gtp_encap_destroy().
- CVE-2023-54141 wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
- CVE-2023-54140 nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- CVE-2023-5414 Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
- CVE-2023-54139 tracing/user_events: Ensure write index cannot be negative
- CVE-2023-54138 drm/msm: fix NULL-deref on irq uninstall
- CVE-2023-54137 vfio/type1: fix cap_migration information leak
- CVE-2023-54136 serial: sprd: Fix DMA buffer leak issue
- CVE-2023-54135 maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()
- CVE-2023-54134 autofs: fix memory leak of waitqueues in autofs_catatonic_mode
- CVE-2023-54133 nfp: clean mc addresses in application firmware when closing port
- CVE-2023-54132 erofs: stop parsing non-compact HEAD index if clusterofs is invalid
- CVE-2023-54131 wifi: rt2x00: Fix memory leak when handling surveys
- CVE-2023-54130 hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
- CVE-2023-5413 Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-54129 octeontx2-af: Add validation for lmac type
- CVE-2023-54128 fs: drop peer group ids under namespace lock
- CVE-2023-54127 fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
- CVE-2023-54126 crypto: safexcel - Cleanup ring IRQ workqueues on load failure
- CVE-2023-54125 fs/ntfs3: Return error for inconsistent extended attributes
- CVE-2023-54124 f2fs: fix to drop all dirty pages during umount() if cp_error is set
- CVE-2023-54123 md/raid10: fix memleak for 'conf->bio_split'
- CVE-2023-54122 drm/msm/dpu: Add check for cstate
- CVE-2023-54121 btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
- CVE-2023-54120 Bluetooth: Fix race condition in hidp_session_thread
- CVE-2023-5412 Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
- CVE-2023-54119 inotify: Avoid reporting event with invalid wd
- CVE-2023-54118 serial: sc16is7xx: setup GPIO controller later in probe
- CVE-2023-54117 s390/dcssblk: fix kernel crash with list_add corruption
- CVE-2023-54116 drm/fbdev-generic: prohibit potential out-of-bounds access
- CVE-2023-54115 pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- CVE-2023-54114 net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- CVE-2023-54113 rcu: dump vmalloc memory info safely
- CVE-2023-54112 kcm: Fix memory leak in error path of kcm_sendmsg()
- CVE-2023-54111 pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
- CVE-2023-54110 usb: rndis_host: Secure rndis_query check against int overflow
- CVE-2023-5411 Funnelforms Free <= 3.4 - Missing Authorization to Post Modification
- CVE-2023-54109 media: rcar_fdp1: Fix refcount leak in probe and remove function
- CVE-2023-54108 scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
- CVE-2023-54107 blk-cgroup: dropping parent refcount after pd_free_fn() is done
- CVE-2023-54106 net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
- CVE-2023-54105 can: isotp: check CAN address family in isotp_bind()
- CVE-2023-54104 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
- CVE-2023-54102 scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- CVE-2023-54101 driver: soc: xilinx: use _safe loop iterator to avoid a use after free
- CVE-2023-54100 scsi: qedi: Fix use after free bug in qedi_remove()
- CVE-2023-5410 Other in HP PC BIOS
- CVE-2023-54099 fs: Protect reconfiguration of sb read-write from racing writes
- CVE-2023-54098 drm/i915/gvt: fix gvt debugfs destroy
- CVE-2023-54097 regulator: stm32-pwr: fix of_iomap leak
- CVE-2023-54096 soundwire: fix enumeration completion
- CVE-2023-54095 powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
- CVE-2023-54094 net: prevent skb corruption on frag list segmentation
- CVE-2023-54093 media: anysee: fix null-ptr-deref in anysee_master_xfer
- CVE-2023-54092 KVM: s390: pv: fix index value of replaced ASCE
- CVE-2023-54091 drm/client: Fix memory leak in drm_client_target_cloned
- CVE-2023-54090 ixgbe: Fix panic during XDP_TX with > 64 CPUs
- CVE-2023-5409 Hardcoded credentials in HP t430 and t638 Thin Clients
- CVE-2023-54089 virtio_pmem: add the missing REQ_OP_WRITE for flush bio
- CVE-2023-54088 blk-cgroup: hold queue_lock when removing blkg->q_node
- CVE-2023-54087 ubi: Fix possible null-ptr-deref in ubi_free_volume()
- CVE-2023-54086 bpf: Add preempt_count_{sub,add} into btf id deny list
- CVE-2023-54085 mptcp: fix NULL pointer dereference on fastopen early fallback
- CVE-2023-54084 ALSA: firewire-digi00x: prevent potential use after free
- CVE-2023-54083 phy: tegra: xusb: Clear the driver reference in usb-phy dev
- CVE-2023-54081 xen: speed up grant-table reclaim
- CVE-2023-54080 btrfs: zoned: skip splitting and logical rewriting on pre-alloc write
- CVE-2023-5408 Openshift: modification of node role labels
- CVE-2023-54079 power: supply: bq27xxx: Fix poll_interval handling and races on remove
- CVE-2023-54078 media: max9286: Free control handler
- CVE-2023-54077 fs/ntfs3: Fix memory leak if ntfs_read_mft failed
- CVE-2023-54076 smb: client: fix missed ses refcounting
- CVE-2023-54075 ASoC: mediatek: common: Fix refcount leak in parse_dai_link_info
- CVE-2023-54074 net/mlx5e: Use correct encap attribute during invalidation
- CVE-2023-54073 tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
- CVE-2023-54072 ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- CVE-2023-54071 wifi: rtw88: use work to update rate to avoid RCU warning
- CVE-2023-54070 igb: clean up in all error paths when enabling SR-IOV
- CVE-2023-5407 Memory corruption in C300
- CVE-2023-54069 ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- CVE-2023-54068 f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()
- CVE-2023-54067 btrfs: fix race when deleting free space root from the dirty cow roots list
- CVE-2023-54066 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer