# Vulnerabilities published in 2023


- [CVE-2023-53601](https://insights.sbomify.com/CVE-2023-53601/): bonding: do not assume skb mac_header is set (medium 5.5)
- [CVE-2023-53600](https://insights.sbomify.com/CVE-2023-53600/): tunnels: fix kasan splat when generating ipv4 pmtu error (critical 9.1)
- [CVE-2023-5360](https://insights.sbomify.com/CVE-2023-5360/): Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload (critical 9.8)
- [CVE-2023-53599](https://insights.sbomify.com/CVE-2023-53599/): crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390 (high 7.8)
- [CVE-2023-53598](https://insights.sbomify.com/CVE-2023-53598/): bus: mhi: host: Range check CHDBOFF and ERDBOFF (high 8.4)
- [CVE-2023-53597](https://insights.sbomify.com/CVE-2023-53597/): cifs: fix mid leak during reconnection after timeout threshold (high 7.5)
- [CVE-2023-53596](https://insights.sbomify.com/CVE-2023-53596/): drivers: base: Free devm resources when unregistering a device (high 7.8)
- [CVE-2023-53595](https://insights.sbomify.com/CVE-2023-53595/): octeontx2-pf: mcs: Fix NULL pointer dereferences (medium 5.5)
- [CVE-2023-53594](https://insights.sbomify.com/CVE-2023-53594/): driver core: fix resource leak in device_add() (medium 5.5)
- [CVE-2023-53593](https://insights.sbomify.com/CVE-2023-53593/): cifs: Release folio lock on fscache read hit. (medium 5.5)
- [CVE-2023-53592](https://insights.sbomify.com/CVE-2023-53592/): gpio: sifive: Fix refcount leak in sifive_gpio_probe (medium 5.5)
- [CVE-2023-53591](https://insights.sbomify.com/CVE-2023-53591/): net/mlx5e: Fix deadlock in tc route query code (medium 5.5)
- [CVE-2023-53590](https://insights.sbomify.com/CVE-2023-53590/): sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (medium 5.5)
- [CVE-2023-5359](https://insights.sbomify.com/CVE-2023-5359/): W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext (low 3.7)
- [CVE-2023-53589](https://insights.sbomify.com/CVE-2023-53589/): wifi: iwlwifi: mvm: don't trust firmware n_channels (high 8.8)
- [CVE-2023-53588](https://insights.sbomify.com/CVE-2023-53588/): wifi: mac80211: check for station first in client probe (medium 5.5)
- [CVE-2023-53587](https://insights.sbomify.com/CVE-2023-53587/): ring-buffer: Sync IRQ works before buffer destruction (high 7.8)
- [CVE-2023-53586](https://insights.sbomify.com/CVE-2023-53586/): scsi: target: Fix multiple LUN_RESET handling (high 8.8)
- [CVE-2023-53585](https://insights.sbomify.com/CVE-2023-53585/): bpf: reject unhashed sockets in bpf_sk_assign (medium 5.5)
- [CVE-2023-53584](https://insights.sbomify.com/CVE-2023-53584/): ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process (medium 5.5)
- [CVE-2023-53583](https://insights.sbomify.com/CVE-2023-53583/): perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start() (medium 5.5)
- [CVE-2023-53582](https://insights.sbomify.com/CVE-2023-53582/): wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (medium 5.5)
- [CVE-2023-53581](https://insights.sbomify.com/CVE-2023-53581/): net/mlx5e: Check for NOT_READY flag state after locking (medium 4.7)
- [CVE-2023-53580](https://insights.sbomify.com/CVE-2023-53580/): USB: Gadget: core: Help prevent panic during UVC unconfigure (high 7.8)
- [CVE-2023-5358](https://insights.sbomify.com/CVE-2023-5358/): Missing authorization in Devolutions Server (medium 5.3)
- [CVE-2023-53579](https://insights.sbomify.com/CVE-2023-53579/): gpio: mvebu: fix irq domain leak (medium 5.5)
- [CVE-2023-53578](https://insights.sbomify.com/CVE-2023-53578/): net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (high 7.8)
- [CVE-2023-53577](https://insights.sbomify.com/CVE-2023-53577/): bpf, cpumap: Make sure kthread is running before map update returns (high 7.8)
- [CVE-2023-53576](https://insights.sbomify.com/CVE-2023-53576/): null_blk: Always check queue mode setting from configfs (medium 5.5)
- [CVE-2023-53575](https://insights.sbomify.com/CVE-2023-53575/): wifi: iwlwifi: mvm: fix potential array out of bounds access (high 7.1)
- [CVE-2023-53574](https://insights.sbomify.com/CVE-2023-53574/): wifi: rtw88: delete timer and free skb queue when unloading (medium 5.5)
- [CVE-2023-53573](https://insights.sbomify.com/CVE-2023-53573/): clk: rs9: Fix suspend/resume (medium 5.5)
- [CVE-2023-53572](https://insights.sbomify.com/CVE-2023-53572/): clk: imx: scu: use _safe list iterator to avoid a use after free (high 7.0)
- [CVE-2023-53571](https://insights.sbomify.com/CVE-2023-53571/): drm/i915: Make intel_get_crtc_new_encoder() less oopsy (medium 5.5)
- [CVE-2023-53570](https://insights.sbomify.com/CVE-2023-53570/): wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() (high 7.8)
- [CVE-2023-5357](https://insights.sbomify.com/CVE-2023-5357/): Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-53569](https://insights.sbomify.com/CVE-2023-53569/): ext2: Check block size validity during mount (high 7.8)
- [CVE-2023-53568](https://insights.sbomify.com/CVE-2023-53568/): s390/zcrypt: don't leak memory if dev_set_name() fails (medium 5.5)
- [CVE-2023-53567](https://insights.sbomify.com/CVE-2023-53567/): spi: qup: Don't skip cleanup in remove's error path (medium 5.5)
- [CVE-2023-53566](https://insights.sbomify.com/CVE-2023-53566/): netfilter: nft_set_rbtree: fix null deref on element insertion (high 7.8)
- [CVE-2023-53565](https://insights.sbomify.com/CVE-2023-53565/): wifi: brcmfmac: Check for probe() id argument being NULL (medium 5.5)
- [CVE-2023-53564](https://insights.sbomify.com/CVE-2023-53564/): ocfs2: fix defrag path triggering jbd2 ASSERT (medium 5.5)
- [CVE-2023-53563](https://insights.sbomify.com/CVE-2023-53563/): cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver (medium 5.5)
- [CVE-2023-53562](https://insights.sbomify.com/CVE-2023-53562/): drm/msm: fix vram leak on bind errors (medium 5.5)
- [CVE-2023-53561](https://insights.sbomify.com/CVE-2023-53561/): net: wwan: iosm: fix NULL pointer dereference when removing device (medium 5.5)
- [CVE-2023-53560](https://insights.sbomify.com/CVE-2023-53560/): tracing/histograms: Add histograms to hist_vars if they have referenced variables (high 7.8)
- [CVE-2023-5356](https://insights.sbomify.com/CVE-2023-5356/): Incorrect Authorization in GitLab (high 7.3)
- [CVE-2023-53559](https://insights.sbomify.com/CVE-2023-53559/): ip_vti: fix potential slab-use-after-free in decode_session6 (high 7.8)
- [CVE-2023-53558](https://insights.sbomify.com/CVE-2023-53558/): rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() (medium 5.5)
- [CVE-2023-53557](https://insights.sbomify.com/CVE-2023-53557/): fprobe: Release rethook after the ftrace_ops is unregistered (high 7.8)
- [CVE-2023-53556](https://insights.sbomify.com/CVE-2023-53556/): iavf: Fix use-after-free in free_netdev (high 7.8)
- [CVE-2023-53555](https://insights.sbomify.com/CVE-2023-53555/): mm/damon/core: initialize damo_filter->list from damos_new_filter() (medium 5.5)
- [CVE-2023-53554](https://insights.sbomify.com/CVE-2023-53554/): staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (high 7.8)
- [CVE-2023-53553](https://insights.sbomify.com/CVE-2023-53553/): HID: hyperv: avoid struct memcpy overrun warning (medium 5.5)
- [CVE-2023-53552](https://insights.sbomify.com/CVE-2023-53552/): drm/i915: mark requests for GuC virtual engines to avoid use-after-free (high 7.8)
- [CVE-2023-53551](https://insights.sbomify.com/CVE-2023-53551/): usb: gadget: u_serial: Add null pointer check in gserial_resume (medium 5.5)
- [CVE-2023-53550](https://insights.sbomify.com/CVE-2023-53550/): cpufreq: amd-pstate: fix global sysfs attribute type (medium 5.5)
- [CVE-2023-5355](https://insights.sbomify.com/CVE-2023-5355/): Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion (high 8.1)
- [CVE-2023-53549](https://insights.sbomify.com/CVE-2023-53549/): netfilter: ipset: Rework long task execution when adding/deleting entries (medium 5.5)
- [CVE-2023-53548](https://insights.sbomify.com/CVE-2023-53548/): net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (medium 5.5)
- [CVE-2023-53547](https://insights.sbomify.com/CVE-2023-53547/): drm/amdgpu: Fix sdma v4 sw fini error (medium 5.5)
- [CVE-2023-53546](https://insights.sbomify.com/CVE-2023-53546/): net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (medium 5.5)
- [CVE-2023-53545](https://insights.sbomify.com/CVE-2023-53545/): drm/amdgpu: unmap and remove csa_va properly (high 7.8)
- [CVE-2023-53544](https://insights.sbomify.com/CVE-2023-53544/): cpufreq: davinci: Fix clk use after free (high 7.8)
- [CVE-2023-53543](https://insights.sbomify.com/CVE-2023-53543/): vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check (high 7.8)
- [CVE-2023-53542](https://insights.sbomify.com/CVE-2023-53542/): ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (medium 5.5)
- [CVE-2023-53541](https://insights.sbomify.com/CVE-2023-53541/): mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (high 7.8)
- [CVE-2023-53540](https://insights.sbomify.com/CVE-2023-53540/): wifi: cfg80211: reject auth/assoc to AP with our address (high 7.1)
- [CVE-2023-5354](https://insights.sbomify.com/CVE-2023-5354/): Awesome Support < 6.1.5 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2023-53539](https://insights.sbomify.com/CVE-2023-53539/): RDMA/rxe: Fix incomplete state save in rxe_requester (high 7.8)
- [CVE-2023-53538](https://insights.sbomify.com/CVE-2023-53538/): btrfs: insert tree mod log move in push_node_left (medium 5.5)
- [CVE-2023-53537](https://insights.sbomify.com/CVE-2023-53537/): f2fs: fix to avoid use-after-free for cached IPU bio (high 7.8)
- [CVE-2023-53536](https://insights.sbomify.com/CVE-2023-53536/): blk-crypto: make blk_crypto_evict_key() more robust (high 7.8)
- [CVE-2023-53535](https://insights.sbomify.com/CVE-2023-53535/): net: bcmgenet: Add a check for oversized packets (high 7.1)
- [CVE-2023-53534](https://insights.sbomify.com/CVE-2023-53534/): drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (medium 5.5)
- [CVE-2023-53533](https://insights.sbomify.com/CVE-2023-53533/): Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (medium 5.5)
- [CVE-2023-53532](https://insights.sbomify.com/CVE-2023-53532/): wifi: ath11k: fix deinitialization of firmware resources (medium 5.5)
- [CVE-2023-53531](https://insights.sbomify.com/CVE-2023-53531/): null_blk: fix poll request timeout handling (high 7.8)
- [CVE-2023-53530](https://insights.sbomify.com/CVE-2023-53530/): scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (medium 5.5)
- [CVE-2023-5353](https://insights.sbomify.com/CVE-2023-5353/): Improper Access Control in salesagility/suitecrm (high 8.1)
- [CVE-2023-53529](https://insights.sbomify.com/CVE-2023-53529/): wifi: rtw88: Fix memory leak in rtw88_usb (medium 5.5)
- [CVE-2023-53528](https://insights.sbomify.com/CVE-2023-53528/): RDMA/rxe: Fix unsafe drain work queue code (medium 5.5)
- [CVE-2023-53527](https://insights.sbomify.com/CVE-2023-53527/): thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() (medium 5.5)
- [CVE-2023-53526](https://insights.sbomify.com/CVE-2023-53526/): jbd2: check 'jh->b_transaction' before removing it from checkpoint (high 7.8)
- [CVE-2023-53525](https://insights.sbomify.com/CVE-2023-53525/): RDMA/cma: Allow UD qp_type to join multicast only (medium 5.5)
- [CVE-2023-53524](https://insights.sbomify.com/CVE-2023-53524/): wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (high 7.8)
- [CVE-2023-53523](https://insights.sbomify.com/CVE-2023-53523/): can: gs_usb: fix time stamp counter initialization (medium 5.5)
- [CVE-2023-53522](https://insights.sbomify.com/CVE-2023-53522/): cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex (high 7.8)
- [CVE-2023-53521](https://insights.sbomify.com/CVE-2023-53521/): scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (high 7.1)
- [CVE-2023-53520](https://insights.sbomify.com/CVE-2023-53520/): Bluetooth: Fix hci_suspend_sync crash (high 7.8)
- [CVE-2023-5352](https://insights.sbomify.com/CVE-2023-5352/): Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply (medium 4.3)
- [CVE-2023-53519](https://insights.sbomify.com/CVE-2023-53519/): media: v4l2-mem2mem: add lock to protect parameter num_rdy (medium 5.5)
- [CVE-2023-53518](https://insights.sbomify.com/CVE-2023-53518/): PM / devfreq: Fix leak in devfreq_dev_release() (high 7.8)
- [CVE-2023-53517](https://insights.sbomify.com/CVE-2023-53517/): tipc: do not update mtu if msg_max is too small in mtu negotiation (critical 9.8)
- [CVE-2023-53516](https://insights.sbomify.com/CVE-2023-53516/): macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF (high 7.8)
- [CVE-2023-53515](https://insights.sbomify.com/CVE-2023-53515/): virtio-mmio: don't break lifecycle of vm_dev (high 7.8)
- [CVE-2023-53514](https://insights.sbomify.com/CVE-2023-53514/): gpu: host1x: Fix memory leak of device names (medium 5.5)
- [CVE-2023-53513](https://insights.sbomify.com/CVE-2023-53513/): nbd: fix incomplete validation of ioctl arg (medium 5.5)
- [CVE-2023-53512](https://insights.sbomify.com/CVE-2023-53512/): scsi: mpt3sas: Fix a memory leak (medium 5.5)
- [CVE-2023-53511](https://insights.sbomify.com/CVE-2023-53511/): io_uring: fix fget leak when fs don't support nowait buffered read (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/149/