# Vulnerabilities published in 2023


- [CVE-2023-53327](https://insights.sbomify.com/CVE-2023-53327/): iommufd/selftest: Catch overflow of uptr and length (medium 5.5)
- [CVE-2023-53326](https://insights.sbomify.com/CVE-2023-53326/): powerpc: Don't try to copy PPR for task with NULL pt_regs (medium 5.5)
- [CVE-2023-53325](https://insights.sbomify.com/CVE-2023-53325/): drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() (medium 5.5)
- [CVE-2023-53324](https://insights.sbomify.com/CVE-2023-53324/): drm/msm/mdp5: Don't leak some plane state (medium 5.5)
- [CVE-2023-53323](https://insights.sbomify.com/CVE-2023-53323/): ext2/dax: Fix ext2_setsize when len is page aligned (medium 5.5)
- [CVE-2023-53322](https://insights.sbomify.com/CVE-2023-53322/): scsi: qla2xxx: Wait for io return on terminate rport (high 8.8)
- [CVE-2023-53321](https://insights.sbomify.com/CVE-2023-53321/): wifi: mac80211_hwsim: drop short frames (high 7.1)
- [CVE-2023-53320](https://insights.sbomify.com/CVE-2023-53320/): scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (high 7.8)
- [CVE-2023-5332](https://insights.sbomify.com/CVE-2023-5332/): Dependency on Vulnerable Third-Party Component in GitLab (medium 5.9)
- [CVE-2023-53319](https://insights.sbomify.com/CVE-2023-53319/): KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm (medium 5.5)
- [CVE-2023-53318](https://insights.sbomify.com/CVE-2023-53318/): recordmcount: Fix memory leaks in the uwrite function (medium 5.5)
- [CVE-2023-53317](https://insights.sbomify.com/CVE-2023-53317/): ext4: fix WARNING in mb_find_extent (medium 5.5)
- [CVE-2023-53316](https://insights.sbomify.com/CVE-2023-53316/): drm/msm/dp: Free resources after unregistering them (high 7.8)
- [CVE-2023-53315](https://insights.sbomify.com/CVE-2023-53315/): wifi: ath11k: Fix SKB corruption in REO destination ring (high 8.8)
- [CVE-2023-53314](https://insights.sbomify.com/CVE-2023-53314/): fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (high 7.8)
- [CVE-2023-53313](https://insights.sbomify.com/CVE-2023-53313/): md/raid10: fix wrong setting of max_corr_read_errors (medium 5.5)
- [CVE-2023-53312](https://insights.sbomify.com/CVE-2023-53312/): net: fix net_dev_start_xmit trace event vs skb_transport_offset() (medium 5.5)
- [CVE-2023-53311](https://insights.sbomify.com/CVE-2023-53311/): nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (high 7.8)
- [CVE-2023-53310](https://insights.sbomify.com/CVE-2023-53310/): power: supply: axp288_fuel_gauge: Fix external_power_changed race (medium 4.7)
- [CVE-2023-5331](https://insights.sbomify.com/CVE-2023-5331/): File Information Leak via IDOR in file_id in Draft Posts (medium 4.3)
- [CVE-2023-53309](https://insights.sbomify.com/CVE-2023-53309/): drm/radeon: Fix integer overflow in radeon_cs_parser_init (medium 5.5)
- [CVE-2023-53308](https://insights.sbomify.com/CVE-2023-53308/): net: fec: Better handle pm_runtime_get() failing in .remove() (high 7.8)
- [CVE-2023-53307](https://insights.sbomify.com/CVE-2023-53307/): rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (high 7.8)
- [CVE-2023-53306](https://insights.sbomify.com/CVE-2023-53306/): fsdax: force clear dirty mark if CoW (medium 5.5)
- [CVE-2023-53305](https://insights.sbomify.com/CVE-2023-53305/): Bluetooth: L2CAP: Fix use-after-free (high 8.8)
- [CVE-2023-53304](https://insights.sbomify.com/CVE-2023-53304/): netfilter: nft_set_rbtree: fix overlap expiration walk (medium 5.5)
- [CVE-2023-53303](https://insights.sbomify.com/CVE-2023-53303/): net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule() (medium 5.5)
- [CVE-2023-53302](https://insights.sbomify.com/CVE-2023-53302/): wifi: iwl4965: Add missing check for create_singlethread_workqueue() (medium 5.5)
- [CVE-2023-53301](https://insights.sbomify.com/CVE-2023-53301/): f2fs: fix kernel crash due to null io->bio (high 7.1)
- [CVE-2023-53300](https://insights.sbomify.com/CVE-2023-53300/): media: hi846: Fix memleak in hi846_init_controls() (medium 5.5)
- [CVE-2023-5330](https://insights.sbomify.com/CVE-2023-5330/): Denial of Service via Opengraph Data Cache (medium 4.3)
- [CVE-2023-53299](https://insights.sbomify.com/CVE-2023-53299/): md/raid10: fix leak of 'r10bio->remaining' for recovery (medium 5.5)
- [CVE-2023-53298](https://insights.sbomify.com/CVE-2023-53298/): nfc: fix memory leak of se_io context in nfc_genl_se_io (medium 5.5)
- [CVE-2023-53297](https://insights.sbomify.com/CVE-2023-53297/): Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (high 8.8)
- [CVE-2023-53296](https://insights.sbomify.com/CVE-2023-53296/): sctp: check send stream number after wait_for_sndbuf (medium 5.5)
- [CVE-2023-53295](https://insights.sbomify.com/CVE-2023-53295/): udf: Do not update file length for failed writes to inline files (medium 5.5)
- [CVE-2023-53294](https://insights.sbomify.com/CVE-2023-53294/): fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() (medium 5.5)
- [CVE-2023-53292](https://insights.sbomify.com/CVE-2023-53292/): blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none (medium 5.5)
- [CVE-2023-53291](https://insights.sbomify.com/CVE-2023-53291/): rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale (medium 5.5)
- [CVE-2023-53290](https://insights.sbomify.com/CVE-2023-53290/): samples/bpf: Fix fout leak in hbm's run_bpf_prog (medium 5.5)
- [CVE-2023-5329](https://insights.sbomify.com/CVE-2023-5329/): Field Logic DataCube4 Web API improper authentication (medium 4.3)
- [CVE-2023-53289](https://insights.sbomify.com/CVE-2023-53289/): media: bdisp: Add missing check for create_workqueue (medium 5.5)
- [CVE-2023-53288](https://insights.sbomify.com/CVE-2023-53288/): drm/client: Fix memory leak in drm_client_modeset_probe (medium 5.5)
- [CVE-2023-53287](https://insights.sbomify.com/CVE-2023-53287/): usb: cdns3: Put the cdns set active part outside the spin lock (medium 5.5)
- [CVE-2023-53286](https://insights.sbomify.com/CVE-2023-53286/): RDMA/mlx5: Return the firmware result upon destroying QP/RQ (high 7.8)
- [CVE-2023-53285](https://insights.sbomify.com/CVE-2023-53285/): ext4: add bounds checking in get_max_inline_xattr_value_size() (high 7.1)
- [CVE-2023-53284](https://insights.sbomify.com/CVE-2023-53284/): drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (medium 5.5)
- [CVE-2023-53282](https://insights.sbomify.com/CVE-2023-53282/): scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (high 7.8)
- [CVE-2023-53281](https://insights.sbomify.com/CVE-2023-53281/): drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (medium 5.5)
- [CVE-2023-53280](https://insights.sbomify.com/CVE-2023-53280/): scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (medium 5.5)
- [CVE-2023-5328](https://insights.sbomify.com/CVE-2023-5328/): SATO CL4NX-J Plus Cookie improper authentication (medium 6.3)
- [CVE-2023-53279](https://insights.sbomify.com/CVE-2023-53279/): misc: vmw_balloon: fix memory leak with using debugfs_lookup() (medium 5.5)
- [CVE-2023-53278](https://insights.sbomify.com/CVE-2023-53278/): ubifs: Fix memory leak in ubifs_sysfs_init() (medium 5.5)
- [CVE-2023-53277](https://insights.sbomify.com/CVE-2023-53277/): wifi: iwl3945: Add missing check for create_singlethread_workqueue (medium 5.5)
- [CVE-2023-53276](https://insights.sbomify.com/CVE-2023-53276/): ubifs: Free memory for tmpfile name (medium 5.5)
- [CVE-2023-53275](https://insights.sbomify.com/CVE-2023-53275/): ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (medium 5.5)
- [CVE-2023-53274](https://insights.sbomify.com/CVE-2023-53274/): clk: mediatek: mt8183: Add back SSPM related clocks (high 7.8)
- [CVE-2023-53273](https://insights.sbomify.com/CVE-2023-53273/): Drivers: vmbus: Check for channel allocation before looking up relids (medium 5.5)
- [CVE-2023-53272](https://insights.sbomify.com/CVE-2023-53272/): net: ena: fix shift-out-of-bounds in exponential backoff (high 7.1)
- [CVE-2023-53271](https://insights.sbomify.com/CVE-2023-53271/): ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (medium 5.5)
- [CVE-2023-53270](https://insights.sbomify.com/CVE-2023-53270/): ext4: fix i_disksize exceeding i_size problem in paritally written case (medium 5.5)
- [CVE-2023-5327](https://insights.sbomify.com/CVE-2023-5327/): SATO CL4NX-J Plus path traversal (low 3.5)
- [CVE-2023-53269](https://insights.sbomify.com/CVE-2023-53269/): block: ublk: make sure that block size is set correctly (medium 5.5)
- [CVE-2023-53268](https://insights.sbomify.com/CVE-2023-53268/): ASoC: fsl_mqs: move of_node_put() to the correct location (medium 5.5)
- [CVE-2023-53267](https://insights.sbomify.com/CVE-2023-53267/): driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event() (medium 5.5)
- [CVE-2023-53266](https://insights.sbomify.com/CVE-2023-53266/): arm64: acpi: Fix possible memory leak of ffh_ctxt (medium 5.5)
- [CVE-2023-53265](https://insights.sbomify.com/CVE-2023-53265/): ubi: ensure that VID header offset + VID header size <= alloc, size (high 7.1)
- [CVE-2023-53264](https://insights.sbomify.com/CVE-2023-53264/): clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe (medium 5.5)
- [CVE-2023-53263](https://insights.sbomify.com/CVE-2023-53263/): drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (high 7.8)
- [CVE-2023-53262](https://insights.sbomify.com/CVE-2023-53262/): f2fs: fix scheduling while atomic in decompression path (high 7.8)
- [CVE-2023-53261](https://insights.sbomify.com/CVE-2023-53261/): coresight: Fix memory leak in acpi_buffer->pointer (medium 5.5)
- [CVE-2023-53260](https://insights.sbomify.com/CVE-2023-53260/): ovl: fix null pointer dereference in ovl_permission() (medium 5.5)
- [CVE-2023-5326](https://insights.sbomify.com/CVE-2023-5326/): SATO CL4NX-J Plus WebConfig improper authentication (medium 6.3)
- [CVE-2023-53259](https://insights.sbomify.com/CVE-2023-53259/): VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF (high 7.1)
- [CVE-2023-53258](https://insights.sbomify.com/CVE-2023-53258/): drm/amd/display: Fix possible underflow for displays with large vblank (medium 5.5)
- [CVE-2023-53257](https://insights.sbomify.com/CVE-2023-53257/): wifi: mac80211: check S1G action frame size (high 7.1)
- [CVE-2023-53256](https://insights.sbomify.com/CVE-2023-53256/): firmware: arm_ffa: Fix FFA device names for logical partitions (medium 5.5)
- [CVE-2023-53255](https://insights.sbomify.com/CVE-2023-53255/): firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (medium 5.5)
- [CVE-2023-53254](https://insights.sbomify.com/CVE-2023-53254/): cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (high 7.8)
- [CVE-2023-53253](https://insights.sbomify.com/CVE-2023-53253/): HID: nvidia-shield: Reference hid_device devm allocation of input_dev name (high 8.8)
- [CVE-2023-53252](https://insights.sbomify.com/CVE-2023-53252/): Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (high 7.8)
- [CVE-2023-53251](https://insights.sbomify.com/CVE-2023-53251/): wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (medium 5.5)
- [CVE-2023-53250](https://insights.sbomify.com/CVE-2023-53250/): firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (medium 5.5)
- [CVE-2023-5325](https://insights.sbomify.com/CVE-2023-5325/): Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS (medium 6.1)
- [CVE-2023-53249](https://insights.sbomify.com/CVE-2023-53249/): clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (medium 5.5)
- [CVE-2023-53248](https://insights.sbomify.com/CVE-2023-53248/): drm/amdgpu: install stub fence into potential unused fence pointers (medium 5.5)
- [CVE-2023-53247](https://insights.sbomify.com/CVE-2023-53247/): btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand (medium 5.5)
- [CVE-2023-53246](https://insights.sbomify.com/CVE-2023-53246/): cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (medium 5.5)
- [CVE-2023-53245](https://insights.sbomify.com/CVE-2023-53245/): scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (medium 5.5)
- [CVE-2023-53244](https://insights.sbomify.com/CVE-2023-53244/): media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (medium 5.5)
- [CVE-2023-53243](https://insights.sbomify.com/CVE-2023-53243/): btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile (medium 5.5)
- [CVE-2023-53242](https://insights.sbomify.com/CVE-2023-53242/): thermal/drivers/hisi: Drop second sensor hi3660 (high 7.1)
- [CVE-2023-53241](https://insights.sbomify.com/CVE-2023-53241/): nfsd: call op_release, even when op_func returns an error (medium 5.5)
- [CVE-2023-53240](https://insights.sbomify.com/CVE-2023-53240/): xsk: check IFF_UP earlier in Tx path (medium 5.5)
- [CVE-2023-5324](https://insights.sbomify.com/CVE-2023-5324/): eeroOS Ethernet Interface denial of service (medium 4.3)
- [CVE-2023-53239](https://insights.sbomify.com/CVE-2023-53239/): drm/msm/mdp5: Add check for kzalloc (medium 5.5)
- [CVE-2023-53238](https://insights.sbomify.com/CVE-2023-53238/): phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (high 7.1)
- [CVE-2023-53237](https://insights.sbomify.com/CVE-2023-53237/): drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (medium 5.5)
- [CVE-2023-53236](https://insights.sbomify.com/CVE-2023-53236/): iommufd: Do not corrupt the pfn list when doing batch carry (high 7.8)
- [CVE-2023-53235](https://insights.sbomify.com/CVE-2023-53235/): drm/tests: helpers: Avoid a driver uaf (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/152/