Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 152 of 430.
- CVE-2023-53327 iommufd/selftest: Catch overflow of uptr and length
- CVE-2023-53326 powerpc: Don't try to copy PPR for task with NULL pt_regs
- CVE-2023-53325 drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
- CVE-2023-53324 drm/msm/mdp5: Don't leak some plane state
- CVE-2023-53323 ext2/dax: Fix ext2_setsize when len is page aligned
- CVE-2023-53322 scsi: qla2xxx: Wait for io return on terminate rport
- CVE-2023-53321 wifi: mac80211_hwsim: drop short frames
- CVE-2023-53320 scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()
- CVE-2023-5332 Dependency on Vulnerable Third-Party Component in GitLab
- CVE-2023-53319 KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm
- CVE-2023-53318 recordmcount: Fix memory leaks in the uwrite function
- CVE-2023-53317 ext4: fix WARNING in mb_find_extent
- CVE-2023-53316 drm/msm/dp: Free resources after unregistering them
- CVE-2023-53315 wifi: ath11k: Fix SKB corruption in REO destination ring
- CVE-2023-53314 fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
- CVE-2023-53313 md/raid10: fix wrong setting of max_corr_read_errors
- CVE-2023-53312 net: fix net_dev_start_xmit trace event vs skb_transport_offset()
- CVE-2023-53311 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- CVE-2023-53310 power: supply: axp288_fuel_gauge: Fix external_power_changed race
- CVE-2023-5331 File Information Leak via IDOR in file_id in Draft Posts
- CVE-2023-53309 drm/radeon: Fix integer overflow in radeon_cs_parser_init
- CVE-2023-53308 net: fec: Better handle pm_runtime_get() failing in .remove()
- CVE-2023-53307 rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
- CVE-2023-53306 fsdax: force clear dirty mark if CoW
- CVE-2023-53305 Bluetooth: L2CAP: Fix use-after-free
- CVE-2023-53304 netfilter: nft_set_rbtree: fix overlap expiration walk
- CVE-2023-53303 net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule()
- CVE-2023-53302 wifi: iwl4965: Add missing check for create_singlethread_workqueue()
- CVE-2023-53301 f2fs: fix kernel crash due to null io->bio
- CVE-2023-53300 media: hi846: Fix memleak in hi846_init_controls()
- CVE-2023-5330 Denial of Service via Opengraph Data Cache
- CVE-2023-53299 md/raid10: fix leak of 'r10bio->remaining' for recovery
- CVE-2023-53298 nfc: fix memory leak of se_io context in nfc_genl_se_io
- CVE-2023-53297 Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- CVE-2023-53296 sctp: check send stream number after wait_for_sndbuf
- CVE-2023-53295 udf: Do not update file length for failed writes to inline files
- CVE-2023-53294 fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
- CVE-2023-53292 blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
- CVE-2023-53291 rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
- CVE-2023-53290 samples/bpf: Fix fout leak in hbm's run_bpf_prog
- CVE-2023-5329 Field Logic DataCube4 Web API improper authentication
- CVE-2023-53289 media: bdisp: Add missing check for create_workqueue
- CVE-2023-53288 drm/client: Fix memory leak in drm_client_modeset_probe
- CVE-2023-53287 usb: cdns3: Put the cdns set active part outside the spin lock
- CVE-2023-53286 RDMA/mlx5: Return the firmware result upon destroying QP/RQ
- CVE-2023-53285 ext4: add bounds checking in get_max_inline_xattr_value_size()
- CVE-2023-53284 drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init()
- CVE-2023-53282 scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- CVE-2023-53281 drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
- CVE-2023-53280 scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- CVE-2023-5328 SATO CL4NX-J Plus Cookie improper authentication
- CVE-2023-53279 misc: vmw_balloon: fix memory leak with using debugfs_lookup()
- CVE-2023-53278 ubifs: Fix memory leak in ubifs_sysfs_init()
- CVE-2023-53277 wifi: iwl3945: Add missing check for create_singlethread_workqueue
- CVE-2023-53276 ubifs: Free memory for tmpfile name
- CVE-2023-53275 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
- CVE-2023-53274 clk: mediatek: mt8183: Add back SSPM related clocks
- CVE-2023-53273 Drivers: vmbus: Check for channel allocation before looking up relids
- CVE-2023-53272 net: ena: fix shift-out-of-bounds in exponential backoff
- CVE-2023-53271 ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()
- CVE-2023-53270 ext4: fix i_disksize exceeding i_size problem in paritally written case
- CVE-2023-5327 SATO CL4NX-J Plus path traversal
- CVE-2023-53269 block: ublk: make sure that block size is set correctly
- CVE-2023-53268 ASoC: fsl_mqs: move of_node_put() to the correct location
- CVE-2023-53267 driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event()
- CVE-2023-53266 arm64: acpi: Fix possible memory leak of ffh_ctxt
- CVE-2023-53265 ubi: ensure that VID header offset + VID header size <= alloc, size
- CVE-2023-53264 clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe
- CVE-2023-53263 drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create
- CVE-2023-53262 f2fs: fix scheduling while atomic in decompression path
- CVE-2023-53261 coresight: Fix memory leak in acpi_buffer->pointer
- CVE-2023-53260 ovl: fix null pointer dereference in ovl_permission()
- CVE-2023-5326 SATO CL4NX-J Plus WebConfig improper authentication
- CVE-2023-53259 VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
- CVE-2023-53258 drm/amd/display: Fix possible underflow for displays with large vblank
- CVE-2023-53257 wifi: mac80211: check S1G action frame size
- CVE-2023-53256 firmware: arm_ffa: Fix FFA device names for logical partitions
- CVE-2023-53255 firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()
- CVE-2023-53254 cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- CVE-2023-53253 HID: nvidia-shield: Reference hid_device devm allocation of input_dev name
- CVE-2023-53252 Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync
- CVE-2023-53251 wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()
- CVE-2023-53250 firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- CVE-2023-5325 Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS
- CVE-2023-53249 clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
- CVE-2023-53248 drm/amdgpu: install stub fence into potential unused fence pointers
- CVE-2023-53247 btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
- CVE-2023-53246 cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
- CVE-2023-53245 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- CVE-2023-53244 media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish
- CVE-2023-53243 btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
- CVE-2023-53242 thermal/drivers/hisi: Drop second sensor hi3660
- CVE-2023-53241 nfsd: call op_release, even when op_func returns an error
- CVE-2023-53240 xsk: check IFF_UP earlier in Tx path
- CVE-2023-5324 eeroOS Ethernet Interface denial of service
- CVE-2023-53239 drm/msm/mdp5: Add check for kzalloc
- CVE-2023-53238 phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- CVE-2023-53237 drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
- CVE-2023-53236 iommufd: Do not corrupt the pfn list when doing batch carry
- CVE-2023-53235 drm/tests: helpers: Avoid a driver uaf