# Vulnerabilities published in 2023


- [CVE-2023-54065](https://insights.sbomify.com/CVE-2023-54065/): net: dsa: realtek: fix out-of-bounds access (high 7.8)
- [CVE-2023-54064](https://insights.sbomify.com/CVE-2023-54064/): ipmi:ssif: Fix a memory leak when scanning for an adapter (not scored)
- [CVE-2023-54063](https://insights.sbomify.com/CVE-2023-54063/): fs/ntfs3: Fix OOB read in indx_insert_into_buffer (high 7.8)
- [CVE-2023-54062](https://insights.sbomify.com/CVE-2023-54062/): ext4: fix invalid free tracking in ext4_xattr_move_to_block() (high 7.8)
- [CVE-2023-54060](https://insights.sbomify.com/CVE-2023-54060/): iommufd: Set end correctly when doing batch carry (high 8.8)
- [CVE-2023-5406](https://insights.sbomify.com/CVE-2023-5406/): Memory corruption in Experion Server (medium 5.9)
- [CVE-2023-54059](https://insights.sbomify.com/CVE-2023-54059/): soc: mediatek: mtk-svs: Enable the IRQ later (not scored)
- [CVE-2023-54058](https://insights.sbomify.com/CVE-2023-54058/): firmware: arm_ffa: Check if ffa_driver remove is present before executing (not scored)
- [CVE-2023-54057](https://insights.sbomify.com/CVE-2023-54057/): iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (not scored)
- [CVE-2023-54056](https://insights.sbomify.com/CVE-2023-54056/): kheaders: Use array declaration instead of char (not scored)
- [CVE-2023-54055](https://insights.sbomify.com/CVE-2023-54055/): RDMA/irdma: Fix memory leak of PBLE objects (not scored)
- [CVE-2023-54053](https://insights.sbomify.com/CVE-2023-54053/): wifi: iwlwifi: pcie: fix possible NULL pointer dereference (not scored)
- [CVE-2023-54052](https://insights.sbomify.com/CVE-2023-54052/): wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU (not scored)
- [CVE-2023-54051](https://insights.sbomify.com/CVE-2023-54051/): net: do not allow gso_size to be set to GSO_BY_FRAGS (not scored)
- [CVE-2023-54050](https://insights.sbomify.com/CVE-2023-54050/): ubifs: Fix memleak when insert_old_idx() failed (high 7.8)
- [CVE-2023-5405](https://insights.sbomify.com/CVE-2023-5405/): Information disclosure in Experion Server (medium 5.9)
- [CVE-2023-54049](https://insights.sbomify.com/CVE-2023-54049/): rpmsg: glink: Add check for kstrdup (not scored)
- [CVE-2023-54048](https://insights.sbomify.com/CVE-2023-54048/): RDMA/bnxt_re: Prevent handling any completions after qp destroy (high 7.8)
- [CVE-2023-54047](https://insights.sbomify.com/CVE-2023-54047/): drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (not scored)
- [CVE-2023-54046](https://insights.sbomify.com/CVE-2023-54046/): crypto: essiv - Handle EBUSY correctly (high 7.8)
- [CVE-2023-54045](https://insights.sbomify.com/CVE-2023-54045/): audit: fix possible soft lockup in __audit_inode_child() (not scored)
- [CVE-2023-54044](https://insights.sbomify.com/CVE-2023-54044/): spmi: Add a check for remove callback when removing a SPMI driver (not scored)
- [CVE-2023-54043](https://insights.sbomify.com/CVE-2023-54043/): iommufd: Do not add the same hwpt to the ioas->hwpt_list twice (high 8.8)
- [CVE-2023-54042](https://insights.sbomify.com/CVE-2023-54042/): powerpc/64s: Fix VAS mm use after free (high 7.8)
- [CVE-2023-54041](https://insights.sbomify.com/CVE-2023-54041/): io_uring: fix memory leak when removing provided buffers (not scored)
- [CVE-2023-54040](https://insights.sbomify.com/CVE-2023-54040/): ice: fix wrong fallback logic for FDIR (high 8.8)
- [CVE-2023-5404](https://insights.sbomify.com/CVE-2023-5404/): Memory corruption in Experion Server (high 8.1)
- [CVE-2023-54039](https://insights.sbomify.com/CVE-2023-54039/): can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (not scored)
- [CVE-2023-54038](https://insights.sbomify.com/CVE-2023-54038/): Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link (not scored)
- [CVE-2023-54037](https://insights.sbomify.com/CVE-2023-54037/): ice: prevent NULL pointer deref during reload (not scored)
- [CVE-2023-54036](https://insights.sbomify.com/CVE-2023-54036/): wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (not scored)
- [CVE-2023-54035](https://insights.sbomify.com/CVE-2023-54035/): netfilter: nf_tables: fix underflow in chain reference counter (high 7.8)
- [CVE-2023-54034](https://insights.sbomify.com/CVE-2023-54034/): iommufd: Make sure to zero vfio_iommu_type1_info before copying to user (not scored)
- [CVE-2023-54033](https://insights.sbomify.com/CVE-2023-54033/): bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps (not scored)
- [CVE-2023-54032](https://insights.sbomify.com/CVE-2023-54032/): btrfs: fix race when deleting quota root from the dirty cow roots list (not scored)
- [CVE-2023-54031](https://insights.sbomify.com/CVE-2023-54031/): vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check (not scored)
- [CVE-2023-54030](https://insights.sbomify.com/CVE-2023-54030/): io_uring/net: don't overflow multishot recv (not scored)
- [CVE-2023-5403](https://insights.sbomify.com/CVE-2023-5403/): Memory corruption in Experion Server (high 8.1)
- [CVE-2023-54028](https://insights.sbomify.com/CVE-2023-54028/): RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" (not scored)
- [CVE-2023-54027](https://insights.sbomify.com/CVE-2023-54027/): iio: core: Prevent invalid memory access when there is no parent (not scored)
- [CVE-2023-54026](https://insights.sbomify.com/CVE-2023-54026/): opp: Fix use-after-free in lazy_opp_tables after probe deferral (high 7.8)
- [CVE-2023-54025](https://insights.sbomify.com/CVE-2023-54025/): wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (not scored)
- [CVE-2023-54024](https://insights.sbomify.com/CVE-2023-54024/): KVM: Destroy target device if coalesced MMIO unregistration fails (not scored)
- [CVE-2023-54023](https://insights.sbomify.com/CVE-2023-54023/): btrfs: fix race between balance and cancel/pause (not scored)
- [CVE-2023-54022](https://insights.sbomify.com/CVE-2023-54022/): ALSA: usb-audio: Fix potential memory leaks at error path for UMP open (not scored)
- [CVE-2023-54021](https://insights.sbomify.com/CVE-2023-54021/): ext4: set goal start correctly in ext4_mb_normalize_request (not scored)
- [CVE-2023-54020](https://insights.sbomify.com/CVE-2023-54020/): dmaengine: sf-pdma: pdma_desc memory leak fix (not scored)
- [CVE-2023-5402](https://insights.sbomify.com/CVE-2023-5402/): Privilege escalation in C-Bus Toolkit (critical 9.8)
- [CVE-2023-54019](https://insights.sbomify.com/CVE-2023-54019/): sched/psi: use kernfs polling functions for PSI trigger polling (high 7.8)
- [CVE-2023-54018](https://insights.sbomify.com/CVE-2023-54018/): drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (not scored)
- [CVE-2023-54017](https://insights.sbomify.com/CVE-2023-54017/): powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (not scored)
- [CVE-2023-54016](https://insights.sbomify.com/CVE-2023-54016/): wifi: ath12k: Fix memory leak in rx_desc and tx_desc (not scored)
- [CVE-2023-54015](https://insights.sbomify.com/CVE-2023-54015/): net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (not scored)
- [CVE-2023-54014](https://insights.sbomify.com/CVE-2023-54014/): scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (not scored)
- [CVE-2023-54013](https://insights.sbomify.com/CVE-2023-54013/): interconnect: Fix locking for runpm vs reclaim (not scored)
- [CVE-2023-54012](https://insights.sbomify.com/CVE-2023-54012/): net: fix stack overflow when LRO is disabled for virtual interfaces (high 7.8)
- [CVE-2023-54011](https://insights.sbomify.com/CVE-2023-54011/): scsi: mpi3mr: Fix an issue found by KASAN (not scored)
- [CVE-2023-54010](https://insights.sbomify.com/CVE-2023-54010/): ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (not scored)
- [CVE-2023-5401](https://insights.sbomify.com/CVE-2023-5401/): Memory corruption in Experion Server (high 8.1)
- [CVE-2023-54009](https://insights.sbomify.com/CVE-2023-54009/): i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (not scored)
- [CVE-2023-54008](https://insights.sbomify.com/CVE-2023-54008/): virtio_vdpa: build affinity masks conditionally (not scored)
- [CVE-2023-54007](https://insights.sbomify.com/CVE-2023-54007/): vmci_host: fix a race condition in vmci_host_poll() causing GPF (not scored)
- [CVE-2023-54006](https://insights.sbomify.com/CVE-2023-54006/): af_unix: Fix data-race around unix_tot_inflight. (not scored)
- [CVE-2023-54005](https://insights.sbomify.com/CVE-2023-54005/): binder: fix memory leak in binder_init() (not scored)
- [CVE-2023-54004](https://insights.sbomify.com/CVE-2023-54004/): udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (high 7.5)
- [CVE-2023-54003](https://insights.sbomify.com/CVE-2023-54003/): RDMA/core: Fix GID entry ref leak when create_ah fails (not scored)
- [CVE-2023-54002](https://insights.sbomify.com/CVE-2023-54002/): btrfs: fix assertion of exclop condition when starting balance (not scored)
- [CVE-2023-54001](https://insights.sbomify.com/CVE-2023-54001/): staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (not scored)
- [CVE-2023-54000](https://insights.sbomify.com/CVE-2023-54000/): net: hns3: fix deadlock issue when externel_lb and reset are executed together (not scored)
- [CVE-2023-5400](https://insights.sbomify.com/CVE-2023-5400/): Memory corruption in Experion Server (high 8.1)
- [CVE-2023-53999](https://insights.sbomify.com/CVE-2023-53999/): net/mlx5e: TC, Fix internal port memory leak (not scored)
- [CVE-2023-53998](https://insights.sbomify.com/CVE-2023-53998/): hwrng: virtio - Fix race on data_avail and actual data (not scored)
- [CVE-2023-53997](https://insights.sbomify.com/CVE-2023-53997/): thermal: of: fix double-free on unregistration (high 7.8)
- [CVE-2023-53996](https://insights.sbomify.com/CVE-2023-53996/): x86/sev: Make enc_dec_hypercall() accept a size instead of npages (critical 9.3)
- [CVE-2023-53995](https://insights.sbomify.com/CVE-2023-53995/): net: ipv4: fix one memleak in __inet_del_ifa() (not scored)
- [CVE-2023-53994](https://insights.sbomify.com/CVE-2023-53994/): ionic: remove WARN_ON to prevent panic_on_warn (not scored)
- [CVE-2023-53993](https://insights.sbomify.com/CVE-2023-53993/): PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y (not scored)
- [CVE-2023-53992](https://insights.sbomify.com/CVE-2023-53992/): wifi: cfg80211: ocb: don't leave if not joined (not scored)
- [CVE-2023-53991](https://insights.sbomify.com/CVE-2023-53991/): drm/msm/dpu: Disallow unallocated resources to be returned (not scored)
- [CVE-2023-53990](https://insights.sbomify.com/CVE-2023-53990/): SMB3: Add missing locks to protect deferred close file list (high 7.8)
- [CVE-2023-5399](https://insights.sbomify.com/CVE-2023-5399/): Path traversal in C-Bus Toolkit (critical 9.8)
- [CVE-2023-53989](https://insights.sbomify.com/CVE-2023-53989/): arm64: mm: fix VA-range sanity check (not scored)
- [CVE-2023-53988](https://insights.sbomify.com/CVE-2023-53988/): fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() (high 7.8)
- [CVE-2023-53987](https://insights.sbomify.com/CVE-2023-53987/): ping: Fix potentail NULL deref for /proc/net/icmp. (not scored)
- [CVE-2023-53986](https://insights.sbomify.com/CVE-2023-53986/): mips: bmips: BCM6358: disable RAC flush for TP1 (high 8.6)
- [CVE-2023-53985](https://insights.sbomify.com/CVE-2023-53985/): Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS) (medium 5.1)
- [CVE-2023-53984](https://insights.sbomify.com/CVE-2023-53984/): HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path (high 8.5)
- [CVE-2023-53983](https://insights.sbomify.com/CVE-2023-53983/): Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass (critical 9.3)
- [CVE-2023-53982](https://insights.sbomify.com/CVE-2023-53982/): PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter (critical 9.3)
- [CVE-2023-53981](https://insights.sbomify.com/CVE-2023-53981/): PhotoShow 3.0 Remote Code Execution via Exiftran Path Injection (high 8.6)
- [CVE-2023-53980](https://insights.sbomify.com/CVE-2023-53980/): ProjectSend r1605 Remote Code Execution via File Extension Manipulation (high 8.7)
- [CVE-2023-5398](https://insights.sbomify.com/CVE-2023-5398/): Memory corruption in Experion Server (medium 5.9)
- [CVE-2023-53979](https://insights.sbomify.com/CVE-2023-53979/): MyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities (high 8.6)
- [CVE-2023-53978](https://insights.sbomify.com/CVE-2023-53978/): myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Announcements (medium 5.1)
- [CVE-2023-53977](https://insights.sbomify.com/CVE-2023-53977/): myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Management (medium 5.1)
- [CVE-2023-53976](https://insights.sbomify.com/CVE-2023-53976/): myBB Forums 1.8.26 Stored Cross-Site Scripting via Template Management (medium 5.1)
- [CVE-2023-53975](https://insights.sbomify.com/CVE-2023-53975/): Atom CMS 2.0 Unauthenticated SQL Injection via Admin Index Page (critical 9.3)
- [CVE-2023-53974](https://insights.sbomify.com/CVE-2023-53974/): D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request (high 8.8)
- [CVE-2023-53973](https://insights.sbomify.com/CVE-2023-53973/): Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module (high 8.5)
- [CVE-2023-53972](https://insights.sbomify.com/CVE-2023-53972/): WebTareas 2.4 Unauthenticated SQL Injection via Session Cookie Parameter (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/144/