# Vulnerabilities published in 2023


- [CVE-2023-53418](https://insights.sbomify.com/CVE-2023-53418/): USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53417](https://insights.sbomify.com/CVE-2023-53417/): USB: sl811: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53416](https://insights.sbomify.com/CVE-2023-53416/): USB: isp1362: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53415](https://insights.sbomify.com/CVE-2023-53415/): USB: dwc3: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53414](https://insights.sbomify.com/CVE-2023-53414/): scsi: snic: Fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53413](https://insights.sbomify.com/CVE-2023-53413/): USB: isp116x: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53412](https://insights.sbomify.com/CVE-2023-53412/): USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53411](https://insights.sbomify.com/CVE-2023-53411/): PM: EM: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53410](https://insights.sbomify.com/CVE-2023-53410/): USB: ULPI: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-5341](https://insights.sbomify.com/CVE-2023-5341/): Imagemagick: heap use-after-free in coders/bmp.c (medium 6.2)
- [CVE-2023-53409](https://insights.sbomify.com/CVE-2023-53409/): drivers: base: component: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53408](https://insights.sbomify.com/CVE-2023-53408/): trace/blktrace: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53407](https://insights.sbomify.com/CVE-2023-53407/): USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53406](https://insights.sbomify.com/CVE-2023-53406/): USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53405](https://insights.sbomify.com/CVE-2023-53405/): USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53404](https://insights.sbomify.com/CVE-2023-53404/): USB: fotg210: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53403](https://insights.sbomify.com/CVE-2023-53403/): time/debug: Fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53402](https://insights.sbomify.com/CVE-2023-53402/): kernel/printk/index.c: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53401](https://insights.sbomify.com/CVE-2023-53401/): mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (medium 4.7)
- [CVE-2023-53400](https://insights.sbomify.com/CVE-2023-53400/): ALSA: hda: Fix Oops by 9.1 surround channel names (medium 5.5)
- [CVE-2023-5340](https://insights.sbomify.com/CVE-2023-5340/): Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection (critical 9.8)
- [CVE-2023-53399](https://insights.sbomify.com/CVE-2023-53399/): ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() (high 7.5)
- [CVE-2023-53398](https://insights.sbomify.com/CVE-2023-53398/): mlx5: fix possible ptp queue fifo use-after-free (high 7.8)
- [CVE-2023-53397](https://insights.sbomify.com/CVE-2023-53397/): modpost: fix off by one in is_executable_section() (medium 5.5)
- [CVE-2023-53396](https://insights.sbomify.com/CVE-2023-53396/): ubifs: Fix memory leak in do_rename (medium 5.5)
- [CVE-2023-53395](https://insights.sbomify.com/CVE-2023-53395/): ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (high 7.8)
- [CVE-2023-53394](https://insights.sbomify.com/CVE-2023-53394/): net/mlx5e: xsk: Fix crash on regular rq reactivation (high 7.8)
- [CVE-2023-53393](https://insights.sbomify.com/CVE-2023-53393/): RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (medium 5.5)
- [CVE-2023-53392](https://insights.sbomify.com/CVE-2023-53392/): HID: intel-ish-hid: Fix kernel panic during warm reset (high 7.1)
- [CVE-2023-53391](https://insights.sbomify.com/CVE-2023-53391/): shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (medium 5.5)
- [CVE-2023-53390](https://insights.sbomify.com/CVE-2023-53390/): drivers: base: dd: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-5339](https://insights.sbomify.com/CVE-2023-5339/): Mattermost Desktop logs all keystrokes during initial run after fresh installation (medium 4.7)
- [CVE-2023-53389](https://insights.sbomify.com/CVE-2023-53389/): drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached (medium 5.5)
- [CVE-2023-53388](https://insights.sbomify.com/CVE-2023-53388/): drm/mediatek: Clean dangling pointer on bind error path (high 7.8)
- [CVE-2023-53387](https://insights.sbomify.com/CVE-2023-53387/): scsi: ufs: core: Fix device management cmd timeout flow (high 7.8)
- [CVE-2023-53386](https://insights.sbomify.com/CVE-2023-53386/): Bluetooth: Fix potential use-after-free when clear keys (high 7.8)
- [CVE-2023-53385](https://insights.sbomify.com/CVE-2023-53385/): media: mdp3: Fix resource leaks in of_find_device_by_node (medium 5.5)
- [CVE-2023-53384](https://insights.sbomify.com/CVE-2023-53384/): wifi: mwifiex: avoid possible NULL skb pointer dereference (medium 5.5)
- [CVE-2023-53383](https://insights.sbomify.com/CVE-2023-53383/): irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (medium 5.5)
- [CVE-2023-53382](https://insights.sbomify.com/CVE-2023-53382/): net/smc: Reset connection when trying to use SMCRv2 fails. (critical 9.8)
- [CVE-2023-53381](https://insights.sbomify.com/CVE-2023-53381/): NFSD: fix leaked reference count of nfsd4_ssc_umount_item (high 7.5)
- [CVE-2023-53380](https://insights.sbomify.com/CVE-2023-53380/): md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (medium 5.5)
- [CVE-2023-5338](https://insights.sbomify.com/CVE-2023-5338/): Theme Blvd Shortcodes <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-53379](https://insights.sbomify.com/CVE-2023-53379/): usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (medium 5.5)
- [CVE-2023-53378](https://insights.sbomify.com/CVE-2023-53378/): drm/i915/dpt: Treat the DPT BO as a framebuffer (high 7.8)
- [CVE-2023-53377](https://insights.sbomify.com/CVE-2023-53377/): cifs: prevent use-after-free by freeing the cfile later (high 7.8)
- [CVE-2023-53376](https://insights.sbomify.com/CVE-2023-53376/): scsi: mpi3mr: Use number of bits to manage bitmap sizes (high 7.8)
- [CVE-2023-53375](https://insights.sbomify.com/CVE-2023-53375/): tracing: Free error logs of tracing instances (medium 5.5)
- [CVE-2023-53374](https://insights.sbomify.com/CVE-2023-53374/): Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early (high 8.8)
- [CVE-2023-53373](https://insights.sbomify.com/CVE-2023-53373/): crypto: seqiv - Handle EBUSY correctly (high 7.8)
- [CVE-2023-53372](https://insights.sbomify.com/CVE-2023-53372/): sctp: fix a potential overflow in sctp_ifwdtsn_skip (high 8.2)
- [CVE-2023-53371](https://insights.sbomify.com/CVE-2023-53371/): net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (medium 5.5)
- [CVE-2023-53370](https://insights.sbomify.com/CVE-2023-53370/): drm/amdgpu: fix memory leak in mes self test (medium 5.5)
- [CVE-2023-5337](https://insights.sbomify.com/CVE-2023-5337/): Contact form Form For All <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-53369](https://insights.sbomify.com/CVE-2023-53369/): net: dcb: choose correct policy to parse DCB_ATTR_BCN (medium 5.5)
- [CVE-2023-53368](https://insights.sbomify.com/CVE-2023-53368/): tracing: Fix race issue between cpu buffer write and swap (medium 4.7)
- [CVE-2023-53367](https://insights.sbomify.com/CVE-2023-53367/): accel/habanalabs: fix mem leak in capture user mappings (medium 5.5)
- [CVE-2023-53366](https://insights.sbomify.com/CVE-2023-53366/): block: be a bit more careful in checking for NULL bdev while polling (medium 5.5)
- [CVE-2023-53365](https://insights.sbomify.com/CVE-2023-53365/): ip6mr: Fix skb_under_panic in ip6mr_cache_report() (medium 5.5)
- [CVE-2023-53364](https://insights.sbomify.com/CVE-2023-53364/): regulator: da9063: better fix null deref with partial DT (medium 5.5)
- [CVE-2023-53363](https://insights.sbomify.com/CVE-2023-53363/): PCI: Fix use-after-free in pci_bus_release_domain_nr() (high 7.8)
- [CVE-2023-53362](https://insights.sbomify.com/CVE-2023-53362/): bus: fsl-mc: don't assume child devices are all fsl-mc devices (medium 5.5)
- [CVE-2023-53361](https://insights.sbomify.com/CVE-2023-53361/): LoongArch: mm: Add p?d_leaf() definitions (medium 5.5)
- [CVE-2023-53360](https://insights.sbomify.com/CVE-2023-53360/): NFSv4.2: Rework scratch handling for READ_PLUS (again) (critical 9.8)
- [CVE-2023-5336](https://insights.sbomify.com/CVE-2023-5336/): iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode (high 8.8)
- [CVE-2023-53359](https://insights.sbomify.com/CVE-2023-53359/): USB: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53358](https://insights.sbomify.com/CVE-2023-53358/): ksmbd: fix racy issue under cocurrent smb2 tree disconnect (high 8.8)
- [CVE-2023-53357](https://insights.sbomify.com/CVE-2023-53357/): md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (high 7.1)
- [CVE-2023-53356](https://insights.sbomify.com/CVE-2023-53356/): usb: gadget: u_serial: Add null pointer check in gserial_suspend (medium 5.5)
- [CVE-2023-53355](https://insights.sbomify.com/CVE-2023-53355/): staging: pi433: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53354](https://insights.sbomify.com/CVE-2023-53354/): skbuff: skb_segment, Call zero copy functions before using skbuff frags (high 7.8)
- [CVE-2023-53353](https://insights.sbomify.com/CVE-2023-53353/): accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release() (medium 5.5)
- [CVE-2023-53352](https://insights.sbomify.com/CVE-2023-53352/): drm/ttm: check null pointer before accessing when swapping (medium 5.5)
- [CVE-2023-53351](https://insights.sbomify.com/CVE-2023-53351/): drm/sched: Check scheduler work queue before calling timeout handling (medium 5.5)
- [CVE-2023-53350](https://insights.sbomify.com/CVE-2023-53350/): accel/qaic: Fix slicing memory leak (medium 5.5)
- [CVE-2023-5335](https://insights.sbomify.com/CVE-2023-5335/): Buzzsprout Podcasting <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-53349](https://insights.sbomify.com/CVE-2023-53349/): media: ov2740: Fix memleak in ov2740_init_controls() (medium 5.5)
- [CVE-2023-53348](https://insights.sbomify.com/CVE-2023-53348/): btrfs: fix deadlock when aborting transaction during relocation with scrub (medium 5.5)
- [CVE-2023-53347](https://insights.sbomify.com/CVE-2023-53347/): net/mlx5: Handle pairing of E-switch via uplink un/load APIs (medium 5.5)
- [CVE-2023-53346](https://insights.sbomify.com/CVE-2023-53346/): kernel/fail_function: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53345](https://insights.sbomify.com/CVE-2023-53345/): rxrpc: Fix potential data race in rxrpc_wait_to_be_connected() (medium 4.7)
- [CVE-2023-53344](https://insights.sbomify.com/CVE-2023-53344/): can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (medium 5.5)
- [CVE-2023-53343](https://insights.sbomify.com/CVE-2023-53343/): icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (medium 5.5)
- [CVE-2023-53342](https://insights.sbomify.com/CVE-2023-53342/): net: marvell: prestera: fix handling IPv4 routes with nhid (medium 5.5)
- [CVE-2023-53341](https://insights.sbomify.com/CVE-2023-53341/): of/fdt: run soc memory setup when early_init_dt_scan_memory fails (medium 5.5)
- [CVE-2023-53340](https://insights.sbomify.com/CVE-2023-53340/): net/mlx5: Collect command failures data only for known commands (high 7.8)
- [CVE-2023-5334](https://insights.sbomify.com/CVE-2023-5334/): WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-53339](https://insights.sbomify.com/CVE-2023-53339/): btrfs: fix BUG_ON condition in btrfs_cancel_balance (medium 5.5)
- [CVE-2023-53338](https://insights.sbomify.com/CVE-2023-53338/): lwt: Fix return values of BPF xmit ops (critical 9.8)
- [CVE-2023-53337](https://insights.sbomify.com/CVE-2023-53337/): nilfs2: do not write dirty data after degenerating to read-only (medium 5.5)
- [CVE-2023-53336](https://insights.sbomify.com/CVE-2023-53336/): media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings (medium 5.5)
- [CVE-2023-53335](https://insights.sbomify.com/CVE-2023-53335/): RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() (high 7.5)
- [CVE-2023-53334](https://insights.sbomify.com/CVE-2023-53334/): USB: chipidea: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53333](https://insights.sbomify.com/CVE-2023-53333/): netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (high 8.2)
- [CVE-2023-53332](https://insights.sbomify.com/CVE-2023-53332/): genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (medium 5.5)
- [CVE-2023-53331](https://insights.sbomify.com/CVE-2023-53331/): pstore/ram: Check start of empty przs during init (high 7.8)
- [CVE-2023-53330](https://insights.sbomify.com/CVE-2023-53330/): caif: fix memory leak in cfctrl_linkup_request() (medium 5.5)
- [CVE-2023-5333](https://insights.sbomify.com/CVE-2023-5333/): Denial of Service via multiple identical User IDs in /api/v4/users/ids (medium 4.3)
- [CVE-2023-53329](https://insights.sbomify.com/CVE-2023-53329/): workqueue: fix data race with the pwq->stats[] increment (medium 4.7)
- [CVE-2023-53328](https://insights.sbomify.com/CVE-2023-53328/): fs/ntfs3: Enhance sanity check while generating attr_list (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/151/