Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 148 of 430.
- CVE-2023-53694 riscv: ftrace: Fixup panic by disabling preemption
- CVE-2023-53693 USB: gadget: Fix the memory leak in raw_gadget driver
- CVE-2023-53692 ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
- CVE-2023-53691 Path traversal in CSMP iSecure Center
- CVE-2023-53690 Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS
- CVE-2023-5369 copy_file_range insufficient capability rights check
- CVE-2023-53689 Nagios Fusion < 4.2.0 License Information Reflected XSS
- CVE-2023-53688 Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay
- CVE-2023-53687 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk
- CVE-2023-53686 net/handshake: fix null-ptr-deref in handshake_nl_done_doit()
- CVE-2023-53685 tun: Fix memory leak for detached NAPI queue.
- CVE-2023-53684 xfrm: Zero padding when dumping algos and encap
- CVE-2023-53683 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- CVE-2023-53682 hwmon: (xgene) Fix ioremap and memremap leak
- CVE-2023-53681 bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- CVE-2023-53680 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
- CVE-2023-5368 msdosfs data disclosure
- CVE-2023-53679 wifi: mt7601u: fix an integer underflow
- CVE-2023-53678 drm/i915: Fix system suspend without fbdev being initialized
- CVE-2023-53677 drm/i915: Fix memory leaks in i915 selftests
- CVE-2023-53676 scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
- CVE-2023-53675 scsi: ses: Fix possible desc_ptr out-of-bounds accesses
- CVE-2023-53674 clk: Fix memory leak in devm_clk_notifier_register()
- CVE-2023-53673 Bluetooth: hci_event: call disconnect callback before deleting conn
- CVE-2023-53672 btrfs: output extra debug info if we failed to find an inline backref
- CVE-2023-53671 srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL
- CVE-2023-53670 nvme-core: fix dev_pm_qos memleak
- CVE-2023-5367 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty
- CVE-2023-53669 tcp: fix skb_copy_ubufs() vs BIG TCP
- CVE-2023-53668 ring-buffer: Fix deadloop issue on reading trace_pipe
- CVE-2023-53667 net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
- CVE-2023-53666 ASoC: codecs: wcd938x: fix missing mbhc init error handling
- CVE-2023-53665 md: don't dereference mddev after export_rdev()
- CVE-2023-53664 OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate()
- CVE-2023-53663 KVM: nSVM: Check instead of asserting on nested TSC scaling support
- CVE-2023-53662 ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}
- CVE-2023-53661 bnxt: avoid overflow in bnxt_get_nvram_directory()
- CVE-2023-53660 bpf, cpumap: Handle skb as well when clean up ptr_ring
- CVE-2023-5366 Openvswitch don't match packets on nd_target field
- CVE-2023-53659 iavf: Fix out-of-bounds when setting channels on remove
- CVE-2023-53658 spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
- CVE-2023-53657 ice: Don't tx before switchdev is fully configured
- CVE-2023-53656 drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
- CVE-2023-53655 rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
- CVE-2023-53654 octeontx2-af: Add validation before accessing cgx and lmac
- CVE-2023-53653 media: amphion: fix REVERSE_INULL issues reported by coverity
- CVE-2023-53652 vdpa: Add features attr to vdpa_nl_policy for nlattr length check
- CVE-2023-53651 Input: exc3000 - properly stop timer on shutdown
- CVE-2023-53650 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
- CVE-2023-5365 HP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure
- CVE-2023-53649 perf trace: Really free the evsel->priv area
- CVE-2023-53648 ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
- CVE-2023-53647 Drivers: hv: vmbus: Don't dereference ACPI root object handle
- CVE-2023-53646 drm/i915/perf: add sentinel to xehp_oa_b_counters
- CVE-2023-53645 bpf: Make bpf_refcount_acquire fallible for non-owning refs
- CVE-2023-53644 media: radio-shark: Add endpoint checks
- CVE-2023-53643 nvme-tcp: don't access released socket during error recovery
- CVE-2023-53642 x86: fix clear_user_rep_good() exception handling annotation
- CVE-2023-53641 wifi: ath9k: hif_usb: fix memory leak of remain_skbs
- CVE-2023-53640 ASoC: lpass: Fix for KASAN use_after_free out of bounds
- CVE-2023-53639 wifi: ath6kl: reduce WARN to dev_dbg() in callback
- CVE-2023-53638 octeon_ep: cancel queued works in probe error path
- CVE-2023-53637 media: i2c: ov772x: Fix memleak in ov772x_probe()
- CVE-2023-53636 clk: microchip: fix potential UAF in auxdev release callback
- CVE-2023-53635 netfilter: conntrack: fix wrong ct->timeout value
- CVE-2023-53634 bpf, arm64: Fixed a BTI error on returning to patched function
- CVE-2023-53633 accel/qaic: Fix a leak in map_user_pages()
- CVE-2023-53632 net/mlx5e: Take RTNL lock when needed before calling xdp_set_features()
- CVE-2023-53631 platform/x86: dell-sysman: Fix reference leak
- CVE-2023-53630 iommufd: Fix unpinning of pages when an access is present
- CVE-2023-5363 Incorrect cipher key & IV length processing
- CVE-2023-53629 fs: dlm: fix use after free in midcomms commit
- CVE-2023-53628 drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs
- CVE-2023-53627 scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list
- CVE-2023-53626 ext4: fix possible double unlock when moving a directory
- CVE-2023-53625 drm/i915/gvt: fix vgpu debugfs clean in remove
- CVE-2023-53624 net/sched: sch_fq: fix integer overflow of "credit"
- CVE-2023-53623 mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
- CVE-2023-53622 gfs2: Fix possible data races in gfs2_show_options()
- CVE-2023-53621 memcontrol: ensure memcg acquired by id is properly set up
- CVE-2023-53620 md: fix soft lockup in status_resync
- CVE-2023-5362 Cross-site scripting in Carousel, Recent Post Slider and Banner Slider
- CVE-2023-53619 netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- CVE-2023-53618 btrfs: reject invalid reloc tree root keys with stack dump
- CVE-2023-53617 soc: aspeed: socinfo: Add kfree for kstrdup
- CVE-2023-53616 jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
- CVE-2023-53615 scsi: qla2xxx: Fix deletion race condition
- CVE-2023-53614 mm/ksm: fix race with VMA iteration and mm_struct teardown
- CVE-2023-53613 dax: Fix dax_mapping_release() use after free
- CVE-2023-53612 hwmon: (coretemp) Simplify platform device handling
- CVE-2023-53611 ipmi_si: fix a memleak in try_smi_init()
- CVE-2023-53610 irqchip: Fix refcount leak in platform_irqchip_probe
- CVE-2023-53609 scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"
- CVE-2023-53608 nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
- CVE-2023-53607 ALSA: ymfpci: Fix BUG_ON in probe function
- CVE-2023-53606 nfsd: clean up potential nfsd_file refcount leaks in COPY codepath
- CVE-2023-53605 drm: amd: display: Fix memory leakage
- CVE-2023-53604 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- CVE-2023-53603 scsi: qla2xxx: Avoid fcport pointer dereference
- CVE-2023-53602 wifi: ath11k: fix memory leak in WMI firmware stats