# Vulnerabilities published in 2023


- [CVE-2023-54158](https://insights.sbomify.com/CVE-2023-54158/): btrfs: don't free qgroup space unless specified (not scored)
- [CVE-2023-54157](https://insights.sbomify.com/CVE-2023-54157/): binder: fix UAF of alloc->vma in race with munmap() (high 7.8)
- [CVE-2023-54156](https://insights.sbomify.com/CVE-2023-54156/): sfc: fix crash when reading stats while NIC is resetting (high 7.8)
- [CVE-2023-54155](https://insights.sbomify.com/CVE-2023-54155/): net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() (not scored)
- [CVE-2023-54154](https://insights.sbomify.com/CVE-2023-54154/): scsi: target: core: Fix target_cmd_counter leak (not scored)
- [CVE-2023-54153](https://insights.sbomify.com/CVE-2023-54153/): ext4: turn quotas off if mount failed after enabling quotas (high 7.8)
- [CVE-2023-54152](https://insights.sbomify.com/CVE-2023-54152/): can: j1939: prevent deadlock by moving j1939_sk_errqueue() (not scored)
- [CVE-2023-54151](https://insights.sbomify.com/CVE-2023-54151/): f2fs: Fix system crash due to lack of free space in LFS (high 7.8)
- [CVE-2023-54150](https://insights.sbomify.com/CVE-2023-54150/): drm/amd: Fix an out of bounds error in BIOS parser (not scored)
- [CVE-2023-5415](https://insights.sbomify.com/CVE-2023-5415/): Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation (medium 4.3)
- [CVE-2023-54149](https://insights.sbomify.com/CVE-2023-54149/): net: dsa: avoid suspicious RCU usage for synced VLAN-aware MAC addresses (high 7.5)
- [CVE-2023-54148](https://insights.sbomify.com/CVE-2023-54148/): net/mlx5e: Move representor neigh cleanup to profile cleanup_tx (not scored)
- [CVE-2023-54147](https://insights.sbomify.com/CVE-2023-54147/): media: platform: mtk-mdp3: Add missing check and free for ida_alloc (not scored)
- [CVE-2023-54146](https://insights.sbomify.com/CVE-2023-54146/): x86/kexec: Fix double-free of elf header buffer (not scored)
- [CVE-2023-54145](https://insights.sbomify.com/CVE-2023-54145/): bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log (not scored)
- [CVE-2023-54144](https://insights.sbomify.com/CVE-2023-54144/): drm/amdkfd: Fix kernel warning during topology setup (not scored)
- [CVE-2023-54143](https://insights.sbomify.com/CVE-2023-54143/): media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() (not scored)
- [CVE-2023-54142](https://insights.sbomify.com/CVE-2023-54142/): gtp: Fix use-after-free in __gtp_encap_destroy(). (high 7.8)
- [CVE-2023-54141](https://insights.sbomify.com/CVE-2023-54141/): wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 (not scored)
- [CVE-2023-54140](https://insights.sbomify.com/CVE-2023-54140/): nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (high 7.8)
- [CVE-2023-5414](https://insights.sbomify.com/CVE-2023-5414/): Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read (critical 9.1)
- [CVE-2023-54139](https://insights.sbomify.com/CVE-2023-54139/): tracing/user_events: Ensure write index cannot be negative (high 7.8)
- [CVE-2023-54138](https://insights.sbomify.com/CVE-2023-54138/): drm/msm: fix NULL-deref on irq uninstall (not scored)
- [CVE-2023-54137](https://insights.sbomify.com/CVE-2023-54137/): vfio/type1: fix cap_migration information leak (not scored)
- [CVE-2023-54136](https://insights.sbomify.com/CVE-2023-54136/): serial: sprd: Fix DMA buffer leak issue (not scored)
- [CVE-2023-54135](https://insights.sbomify.com/CVE-2023-54135/): maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() (high 7.8)
- [CVE-2023-54134](https://insights.sbomify.com/CVE-2023-54134/): autofs: fix memory leak of waitqueues in autofs_catatonic_mode (not scored)
- [CVE-2023-54133](https://insights.sbomify.com/CVE-2023-54133/): nfp: clean mc addresses in application firmware when closing port (not scored)
- [CVE-2023-54132](https://insights.sbomify.com/CVE-2023-54132/): erofs: stop parsing non-compact HEAD index if clusterofs is invalid (high 7.8)
- [CVE-2023-54131](https://insights.sbomify.com/CVE-2023-54131/): wifi: rt2x00: Fix memory leak when handling surveys (not scored)
- [CVE-2023-54130](https://insights.sbomify.com/CVE-2023-54130/): hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (high 7.8)
- [CVE-2023-5413](https://insights.sbomify.com/CVE-2023-5413/): Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-54129](https://insights.sbomify.com/CVE-2023-54129/): octeontx2-af: Add validation for lmac type (high 7.1)
- [CVE-2023-54128](https://insights.sbomify.com/CVE-2023-54128/): fs: drop peer group ids under namespace lock (high 7.8)
- [CVE-2023-54127](https://insights.sbomify.com/CVE-2023-54127/): fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (high 7.8)
- [CVE-2023-54126](https://insights.sbomify.com/CVE-2023-54126/): crypto: safexcel - Cleanup ring IRQ workqueues on load failure (not scored)
- [CVE-2023-54125](https://insights.sbomify.com/CVE-2023-54125/): fs/ntfs3: Return error for inconsistent extended attributes (high 7.8)
- [CVE-2023-54124](https://insights.sbomify.com/CVE-2023-54124/): f2fs: fix to drop all dirty pages during umount() if cp_error is set (high 7.8)
- [CVE-2023-54123](https://insights.sbomify.com/CVE-2023-54123/): md/raid10: fix memleak for 'conf->bio_split' (not scored)
- [CVE-2023-54122](https://insights.sbomify.com/CVE-2023-54122/): drm/msm/dpu: Add check for cstate (not scored)
- [CVE-2023-54121](https://insights.sbomify.com/CVE-2023-54121/): btrfs: fix incorrect splitting in btrfs_drop_extent_map_range (high 7.8)
- [CVE-2023-54120](https://insights.sbomify.com/CVE-2023-54120/): Bluetooth: Fix race condition in hidp_session_thread (high 8.8)
- [CVE-2023-5412](https://insights.sbomify.com/CVE-2023-5412/): Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-54119](https://insights.sbomify.com/CVE-2023-54119/): inotify: Avoid reporting event with invalid wd (not scored)
- [CVE-2023-54118](https://insights.sbomify.com/CVE-2023-54118/): serial: sc16is7xx: setup GPIO controller later in probe (not scored)
- [CVE-2023-54117](https://insights.sbomify.com/CVE-2023-54117/): s390/dcssblk: fix kernel crash with list_add corruption (not scored)
- [CVE-2023-54116](https://insights.sbomify.com/CVE-2023-54116/): drm/fbdev-generic: prohibit potential out-of-bounds access (high 7.8)
- [CVE-2023-54115](https://insights.sbomify.com/CVE-2023-54115/): pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (not scored)
- [CVE-2023-54114](https://insights.sbomify.com/CVE-2023-54114/): net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (not scored)
- [CVE-2023-54113](https://insights.sbomify.com/CVE-2023-54113/): rcu: dump vmalloc memory info safely (not scored)
- [CVE-2023-54112](https://insights.sbomify.com/CVE-2023-54112/): kcm: Fix memory leak in error path of kcm_sendmsg() (not scored)
- [CVE-2023-54111](https://insights.sbomify.com/CVE-2023-54111/): pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (not scored)
- [CVE-2023-54110](https://insights.sbomify.com/CVE-2023-54110/): usb: rndis_host: Secure rndis_query check against int overflow (not scored)
- [CVE-2023-5411](https://insights.sbomify.com/CVE-2023-5411/): Funnelforms Free <= 3.4 - Missing Authorization to Post Modification (medium 4.3)
- [CVE-2023-54109](https://insights.sbomify.com/CVE-2023-54109/): media: rcar_fdp1: Fix refcount leak in probe and remove function (not scored)
- [CVE-2023-54108](https://insights.sbomify.com/CVE-2023-54108/): scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (not scored)
- [CVE-2023-54107](https://insights.sbomify.com/CVE-2023-54107/): blk-cgroup: dropping parent refcount after pd_free_fn() is done (high 7.8)
- [CVE-2023-54106](https://insights.sbomify.com/CVE-2023-54106/): net/mlx5: fix potential memory leak in mlx5e_init_rep_rx (not scored)
- [CVE-2023-54105](https://insights.sbomify.com/CVE-2023-54105/): can: isotp: check CAN address family in isotp_bind() (not scored)
- [CVE-2023-54104](https://insights.sbomify.com/CVE-2023-54104/): mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (high 7.8)
- [CVE-2023-54102](https://insights.sbomify.com/CVE-2023-54102/): scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (not scored)
- [CVE-2023-54101](https://insights.sbomify.com/CVE-2023-54101/): driver: soc: xilinx: use _safe loop iterator to avoid a use after free (not scored)
- [CVE-2023-54100](https://insights.sbomify.com/CVE-2023-54100/): scsi: qedi: Fix use after free bug in qedi_remove() (high 7.8)
- [CVE-2023-5410](https://insights.sbomify.com/CVE-2023-5410/): Other in HP PC BIOS (high 8.2)
- [CVE-2023-54099](https://insights.sbomify.com/CVE-2023-54099/): fs: Protect reconfiguration of sb read-write from racing writes (not scored)
- [CVE-2023-54098](https://insights.sbomify.com/CVE-2023-54098/): drm/i915/gvt: fix gvt debugfs destroy (high 7.3)
- [CVE-2023-54097](https://insights.sbomify.com/CVE-2023-54097/): regulator: stm32-pwr: fix of_iomap leak (not scored)
- [CVE-2023-54096](https://insights.sbomify.com/CVE-2023-54096/): soundwire: fix enumeration completion (high 7.8)
- [CVE-2023-54095](https://insights.sbomify.com/CVE-2023-54095/): powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (high 7.0)
- [CVE-2023-54094](https://insights.sbomify.com/CVE-2023-54094/): net: prevent skb corruption on frag list segmentation (critical 9.8)
- [CVE-2023-54093](https://insights.sbomify.com/CVE-2023-54093/): media: anysee: fix null-ptr-deref in anysee_master_xfer (not scored)
- [CVE-2023-54092](https://insights.sbomify.com/CVE-2023-54092/): KVM: s390: pv: fix index value of replaced ASCE (high 8.8)
- [CVE-2023-54091](https://insights.sbomify.com/CVE-2023-54091/): drm/client: Fix memory leak in drm_client_target_cloned (not scored)
- [CVE-2023-54090](https://insights.sbomify.com/CVE-2023-54090/): ixgbe: Fix panic during XDP_TX with > 64 CPUs (critical 9.8)
- [CVE-2023-5409](https://insights.sbomify.com/CVE-2023-5409/): Hardcoded credentials in HP t430 and t638 Thin Clients (medium 6.8)
- [CVE-2023-54089](https://insights.sbomify.com/CVE-2023-54089/): virtio_pmem: add the missing REQ_OP_WRITE for flush bio (not scored)
- [CVE-2023-54088](https://insights.sbomify.com/CVE-2023-54088/): blk-cgroup: hold queue_lock when removing blkg->q_node (high 7.8)
- [CVE-2023-54087](https://insights.sbomify.com/CVE-2023-54087/): ubi: Fix possible null-ptr-deref in ubi_free_volume() (not scored)
- [CVE-2023-54086](https://insights.sbomify.com/CVE-2023-54086/): bpf: Add preempt_count_{sub,add} into btf id deny list (not scored)
- [CVE-2023-54085](https://insights.sbomify.com/CVE-2023-54085/): mptcp: fix NULL pointer dereference on fastopen early fallback (high 7.5)
- [CVE-2023-54084](https://insights.sbomify.com/CVE-2023-54084/): ALSA: firewire-digi00x: prevent potential use after free (not scored)
- [CVE-2023-54083](https://insights.sbomify.com/CVE-2023-54083/): phy: tegra: xusb: Clear the driver reference in usb-phy dev (high 7.8)
- [CVE-2023-54081](https://insights.sbomify.com/CVE-2023-54081/): xen: speed up grant-table reclaim (not scored)
- [CVE-2023-54080](https://insights.sbomify.com/CVE-2023-54080/): btrfs: zoned: skip splitting and logical rewriting on pre-alloc write (not scored)
- [CVE-2023-5408](https://insights.sbomify.com/CVE-2023-5408/): Openshift: modification of node role labels (high 7.2)
- [CVE-2023-54079](https://insights.sbomify.com/CVE-2023-54079/): power: supply: bq27xxx: Fix poll_interval handling and races on remove (high 7.8)
- [CVE-2023-54078](https://insights.sbomify.com/CVE-2023-54078/): media: max9286: Free control handler (not scored)
- [CVE-2023-54077](https://insights.sbomify.com/CVE-2023-54077/): fs/ntfs3: Fix memory leak if ntfs_read_mft failed (high 7.8)
- [CVE-2023-54076](https://insights.sbomify.com/CVE-2023-54076/): smb: client: fix missed ses refcounting (critical 9.8)
- [CVE-2023-54075](https://insights.sbomify.com/CVE-2023-54075/): ASoC: mediatek: common: Fix refcount leak in parse_dai_link_info (not scored)
- [CVE-2023-54074](https://insights.sbomify.com/CVE-2023-54074/): net/mlx5e: Use correct encap attribute during invalidation (high 7.8)
- [CVE-2023-54073](https://insights.sbomify.com/CVE-2023-54073/): tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site (not scored)
- [CVE-2023-54072](https://insights.sbomify.com/CVE-2023-54072/): ALSA: pcm: Fix potential data race at PCM memory allocation helpers (not scored)
- [CVE-2023-54071](https://insights.sbomify.com/CVE-2023-54071/): wifi: rtw88: use work to update rate to avoid RCU warning (high 8.8)
- [CVE-2023-54070](https://insights.sbomify.com/CVE-2023-54070/): igb: clean up in all error paths when enabling SR-IOV (not scored)
- [CVE-2023-5407](https://insights.sbomify.com/CVE-2023-5407/): Memory corruption in C300 (medium 5.9)
- [CVE-2023-54069](https://insights.sbomify.com/CVE-2023-54069/): ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (not scored)
- [CVE-2023-54068](https://insights.sbomify.com/CVE-2023-54068/): f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() (high 7.8)
- [CVE-2023-54067](https://insights.sbomify.com/CVE-2023-54067/): btrfs: fix race when deleting free space root from the dirty cow roots list (high 7.8)
- [CVE-2023-54066](https://insights.sbomify.com/CVE-2023-54066/): media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/143/