# Vulnerabilities published in 2023


- [CVE-2023-53694](https://insights.sbomify.com/CVE-2023-53694/): riscv: ftrace: Fixup panic by disabling preemption (not scored)
- [CVE-2023-53693](https://insights.sbomify.com/CVE-2023-53693/): USB: gadget: Fix the memory leak in raw_gadget driver (not scored)
- [CVE-2023-53692](https://insights.sbomify.com/CVE-2023-53692/): ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (high 7.8)
- [CVE-2023-53691](https://insights.sbomify.com/CVE-2023-53691/): Path traversal in CSMP iSecure Center (high 8.3)
- [CVE-2023-53690](https://insights.sbomify.com/CVE-2023-53690/): Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS (medium 6.2)
- [CVE-2023-5369](https://insights.sbomify.com/CVE-2023-5369/): copy_file_range insufficient capability rights check (high 7.1)
- [CVE-2023-53689](https://insights.sbomify.com/CVE-2023-53689/): Nagios Fusion < 4.2.0 License Information Reflected XSS (medium 6.0)
- [CVE-2023-53688](https://insights.sbomify.com/CVE-2023-53688/): Nagios XI < 5.11.3 XSS & CSRF via Hypermap Replay (medium 5.1)
- [CVE-2023-53687](https://insights.sbomify.com/CVE-2023-53687/): tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (medium 5.5)
- [CVE-2023-53686](https://insights.sbomify.com/CVE-2023-53686/): net/handshake: fix null-ptr-deref in handshake_nl_done_doit() (medium 5.5)
- [CVE-2023-53685](https://insights.sbomify.com/CVE-2023-53685/): tun: Fix memory leak for detached NAPI queue. (medium 5.5)
- [CVE-2023-53684](https://insights.sbomify.com/CVE-2023-53684/): xfrm: Zero padding when dumping algos and encap (medium 5.5)
- [CVE-2023-53683](https://insights.sbomify.com/CVE-2023-53683/): fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (high 7.8)
- [CVE-2023-53682](https://insights.sbomify.com/CVE-2023-53682/): hwmon: (xgene) Fix ioremap and memremap leak (medium 5.5)
- [CVE-2023-53681](https://insights.sbomify.com/CVE-2023-53681/): bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (medium 5.5)
- [CVE-2023-53680](https://insights.sbomify.com/CVE-2023-53680/): NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (high 7.5)
- [CVE-2023-5368](https://insights.sbomify.com/CVE-2023-5368/): msdosfs data disclosure (medium 6.5)
- [CVE-2023-53679](https://insights.sbomify.com/CVE-2023-53679/): wifi: mt7601u: fix an integer underflow (high 8.3)
- [CVE-2023-53678](https://insights.sbomify.com/CVE-2023-53678/): drm/i915: Fix system suspend without fbdev being initialized (medium 5.5)
- [CVE-2023-53677](https://insights.sbomify.com/CVE-2023-53677/): drm/i915: Fix memory leaks in i915 selftests (medium 5.5)
- [CVE-2023-53676](https://insights.sbomify.com/CVE-2023-53676/): scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (high 8.8)
- [CVE-2023-53675](https://insights.sbomify.com/CVE-2023-53675/): scsi: ses: Fix possible desc_ptr out-of-bounds accesses (high 8.8)
- [CVE-2023-53674](https://insights.sbomify.com/CVE-2023-53674/): clk: Fix memory leak in devm_clk_notifier_register() (high 7.8)
- [CVE-2023-53673](https://insights.sbomify.com/CVE-2023-53673/): Bluetooth: hci_event: call disconnect callback before deleting conn (high 8.8)
- [CVE-2023-53672](https://insights.sbomify.com/CVE-2023-53672/): btrfs: output extra debug info if we failed to find an inline backref (medium 5.5)
- [CVE-2023-53671](https://insights.sbomify.com/CVE-2023-53671/): srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL (medium 5.5)
- [CVE-2023-53670](https://insights.sbomify.com/CVE-2023-53670/): nvme-core: fix dev_pm_qos memleak (medium 5.5)
- [CVE-2023-5367](https://insights.sbomify.com/CVE-2023-5367/): Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty (high 7.8)
- [CVE-2023-53669](https://insights.sbomify.com/CVE-2023-53669/): tcp: fix skb_copy_ubufs() vs BIG TCP (high 7.8)
- [CVE-2023-53668](https://insights.sbomify.com/CVE-2023-53668/): ring-buffer: Fix deadloop issue on reading trace_pipe (high 7.1)
- [CVE-2023-53667](https://insights.sbomify.com/CVE-2023-53667/): net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (medium 5.5)
- [CVE-2023-53666](https://insights.sbomify.com/CVE-2023-53666/): ASoC: codecs: wcd938x: fix missing mbhc init error handling (medium 5.5)
- [CVE-2023-53665](https://insights.sbomify.com/CVE-2023-53665/): md: don't dereference mddev after export_rdev() (medium 5.5)
- [CVE-2023-53664](https://insights.sbomify.com/CVE-2023-53664/): OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate() (medium 5.5)
- [CVE-2023-53663](https://insights.sbomify.com/CVE-2023-53663/): KVM: nSVM: Check instead of asserting on nested TSC scaling support (medium 5.5)
- [CVE-2023-53662](https://insights.sbomify.com/CVE-2023-53662/): ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (medium 5.5)
- [CVE-2023-53661](https://insights.sbomify.com/CVE-2023-53661/): bnxt: avoid overflow in bnxt_get_nvram_directory() (medium 5.5)
- [CVE-2023-53660](https://insights.sbomify.com/CVE-2023-53660/): bpf, cpumap: Handle skb as well when clean up ptr_ring (high 7.8)
- [CVE-2023-5366](https://insights.sbomify.com/CVE-2023-5366/): Openvswitch don't match packets on nd_target field (high 7.1)
- [CVE-2023-53659](https://insights.sbomify.com/CVE-2023-53659/): iavf: Fix out-of-bounds when setting channels on remove (high 7.8)
- [CVE-2023-53658](https://insights.sbomify.com/CVE-2023-53658/): spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (medium 5.5)
- [CVE-2023-53657](https://insights.sbomify.com/CVE-2023-53657/): ice: Don't tx before switchdev is fully configured (medium 5.5)
- [CVE-2023-53656](https://insights.sbomify.com/CVE-2023-53656/): drivers/perf: hisi: Don't migrate perf to the CPU going to teardown (medium 5.5)
- [CVE-2023-53655](https://insights.sbomify.com/CVE-2023-53655/): rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed (medium 5.5)
- [CVE-2023-53654](https://insights.sbomify.com/CVE-2023-53654/): octeontx2-af: Add validation before accessing cgx and lmac (medium 5.5)
- [CVE-2023-53653](https://insights.sbomify.com/CVE-2023-53653/): media: amphion: fix REVERSE_INULL issues reported by coverity (medium 5.5)
- [CVE-2023-53652](https://insights.sbomify.com/CVE-2023-53652/): vdpa: Add features attr to vdpa_nl_policy for nlattr length check (high 7.8)
- [CVE-2023-53651](https://insights.sbomify.com/CVE-2023-53651/): Input: exc3000 - properly stop timer on shutdown (high 7.8)
- [CVE-2023-53650](https://insights.sbomify.com/CVE-2023-53650/): fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (medium 5.5)
- [CVE-2023-5365](https://insights.sbomify.com/CVE-2023-5365/): HP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure (critical 9.8)
- [CVE-2023-53649](https://insights.sbomify.com/CVE-2023-53649/): perf trace: Really free the evsel->priv area (medium 5.5)
- [CVE-2023-53648](https://insights.sbomify.com/CVE-2023-53648/): ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (medium 5.5)
- [CVE-2023-53647](https://insights.sbomify.com/CVE-2023-53647/): Drivers: hv: vmbus: Don't dereference ACPI root object handle (medium 5.5)
- [CVE-2023-53646](https://insights.sbomify.com/CVE-2023-53646/): drm/i915/perf: add sentinel to xehp_oa_b_counters (high 7.8)
- [CVE-2023-53645](https://insights.sbomify.com/CVE-2023-53645/): bpf: Make bpf_refcount_acquire fallible for non-owning refs (high 7.8)
- [CVE-2023-53644](https://insights.sbomify.com/CVE-2023-53644/): media: radio-shark: Add endpoint checks (medium 5.5)
- [CVE-2023-53643](https://insights.sbomify.com/CVE-2023-53643/): nvme-tcp: don't access released socket during error recovery (high 7.8)
- [CVE-2023-53642](https://insights.sbomify.com/CVE-2023-53642/): x86: fix clear_user_rep_good() exception handling annotation (medium 5.5)
- [CVE-2023-53641](https://insights.sbomify.com/CVE-2023-53641/): wifi: ath9k: hif_usb: fix memory leak of remain_skbs (medium 5.5)
- [CVE-2023-53640](https://insights.sbomify.com/CVE-2023-53640/): ASoC: lpass: Fix for KASAN use_after_free out of bounds (high 7.3)
- [CVE-2023-53639](https://insights.sbomify.com/CVE-2023-53639/): wifi: ath6kl: reduce WARN to dev_dbg() in callback (medium 5.5)
- [CVE-2023-53638](https://insights.sbomify.com/CVE-2023-53638/): octeon_ep: cancel queued works in probe error path (high 7.0)
- [CVE-2023-53637](https://insights.sbomify.com/CVE-2023-53637/): media: i2c: ov772x: Fix memleak in ov772x_probe() (medium 5.5)
- [CVE-2023-53636](https://insights.sbomify.com/CVE-2023-53636/): clk: microchip: fix potential UAF in auxdev release callback (high 7.8)
- [CVE-2023-53635](https://insights.sbomify.com/CVE-2023-53635/): netfilter: conntrack: fix wrong ct->timeout value (high 8.2)
- [CVE-2023-53634](https://insights.sbomify.com/CVE-2023-53634/): bpf, arm64: Fixed a BTI error on returning to patched function (medium 5.5)
- [CVE-2023-53633](https://insights.sbomify.com/CVE-2023-53633/): accel/qaic: Fix a leak in map_user_pages() (medium 5.5)
- [CVE-2023-53632](https://insights.sbomify.com/CVE-2023-53632/): net/mlx5e: Take RTNL lock when needed before calling xdp_set_features() (medium 5.5)
- [CVE-2023-53631](https://insights.sbomify.com/CVE-2023-53631/): platform/x86: dell-sysman: Fix reference leak (medium 5.5)
- [CVE-2023-53630](https://insights.sbomify.com/CVE-2023-53630/): iommufd: Fix unpinning of pages when an access is present (high 8.8)
- [CVE-2023-5363](https://insights.sbomify.com/CVE-2023-5363/): Incorrect cipher key & IV length processing (high 7.5)
- [CVE-2023-53629](https://insights.sbomify.com/CVE-2023-53629/): fs: dlm: fix use after free in midcomms commit (critical 9.8)
- [CVE-2023-53628](https://insights.sbomify.com/CVE-2023-53628/): drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs (medium 5.5)
- [CVE-2023-53627](https://insights.sbomify.com/CVE-2023-53627/): scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list (high 7.8)
- [CVE-2023-53626](https://insights.sbomify.com/CVE-2023-53626/): ext4: fix possible double unlock when moving a directory (high 7.8)
- [CVE-2023-53625](https://insights.sbomify.com/CVE-2023-53625/): drm/i915/gvt: fix vgpu debugfs clean in remove (medium 5.5)
- [CVE-2023-53624](https://insights.sbomify.com/CVE-2023-53624/): net/sched: sch_fq: fix integer overflow of "credit" (medium 5.5)
- [CVE-2023-53623](https://insights.sbomify.com/CVE-2023-53623/): mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (medium 4.7)
- [CVE-2023-53622](https://insights.sbomify.com/CVE-2023-53622/): gfs2: Fix possible data races in gfs2_show_options() (high 7.0)
- [CVE-2023-53621](https://insights.sbomify.com/CVE-2023-53621/): memcontrol: ensure memcg acquired by id is properly set up (high 7.8)
- [CVE-2023-53620](https://insights.sbomify.com/CVE-2023-53620/): md: fix soft lockup in status_resync (medium 5.5)
- [CVE-2023-5362](https://insights.sbomify.com/CVE-2023-5362/): Cross-site scripting in Carousel, Recent Post Slider and Banner Slider (medium 6.4)
- [CVE-2023-53619](https://insights.sbomify.com/CVE-2023-53619/): netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (high 7.8)
- [CVE-2023-53618](https://insights.sbomify.com/CVE-2023-53618/): btrfs: reject invalid reloc tree root keys with stack dump (medium 5.5)
- [CVE-2023-53617](https://insights.sbomify.com/CVE-2023-53617/): soc: aspeed: socinfo: Add kfree for kstrdup (medium 5.5)
- [CVE-2023-53616](https://insights.sbomify.com/CVE-2023-53616/): jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (high 7.8)
- [CVE-2023-53615](https://insights.sbomify.com/CVE-2023-53615/): scsi: qla2xxx: Fix deletion race condition (high 8.8)
- [CVE-2023-53614](https://insights.sbomify.com/CVE-2023-53614/): mm/ksm: fix race with VMA iteration and mm_struct teardown (medium 4.7)
- [CVE-2023-53613](https://insights.sbomify.com/CVE-2023-53613/): dax: Fix dax_mapping_release() use after free (high 7.8)
- [CVE-2023-53612](https://insights.sbomify.com/CVE-2023-53612/): hwmon: (coretemp) Simplify platform device handling (medium 5.5)
- [CVE-2023-53611](https://insights.sbomify.com/CVE-2023-53611/): ipmi_si: fix a memleak in try_smi_init() (medium 5.5)
- [CVE-2023-53610](https://insights.sbomify.com/CVE-2023-53610/): irqchip: Fix refcount leak in platform_irqchip_probe (medium 5.5)
- [CVE-2023-53609](https://insights.sbomify.com/CVE-2023-53609/): scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed" (high 7.8)
- [CVE-2023-53608](https://insights.sbomify.com/CVE-2023-53608/): nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (high 7.8)
- [CVE-2023-53607](https://insights.sbomify.com/CVE-2023-53607/): ALSA: ymfpci: Fix BUG_ON in probe function (medium 5.5)
- [CVE-2023-53606](https://insights.sbomify.com/CVE-2023-53606/): nfsd: clean up potential nfsd_file refcount leaks in COPY codepath (high 7.5)
- [CVE-2023-53605](https://insights.sbomify.com/CVE-2023-53605/): drm: amd: display: Fix memory leakage (medium 5.5)
- [CVE-2023-53604](https://insights.sbomify.com/CVE-2023-53604/): dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (high 7.8)
- [CVE-2023-53603](https://insights.sbomify.com/CVE-2023-53603/): scsi: qla2xxx: Avoid fcport pointer dereference (medium 5.5)
- [CVE-2023-53602](https://insights.sbomify.com/CVE-2023-53602/): wifi: ath11k: fix memory leak in WMI firmware stats (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/148/