Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 156 of 430.
- CVE-2023-52934 mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups
- CVE-2023-52933 Squashfs: fix handling and sanity checking of xattr_ids count
- CVE-2023-52932 mm/swapfile: add cond_resched() in get_swap_pages()
- CVE-2023-52931 drm/i915: Avoid potential vm use-after-free
- CVE-2023-52930 drm/i915: Fix potential bit_17 double-free
- CVE-2023-5293 ECshop leancloud.php sql injection
- CVE-2023-52929 nvmem: core: fix cleanup after dev_set_name()
- CVE-2023-52928 bpf: Skip invalid kfunc call in backtrack_insn
- CVE-2023-52927 netfilter: allow exp not to be removed in nf_ct_find_expectation
- CVE-2023-52926 io_uring/rw: split io_read() into a helper
- CVE-2023-52925 netfilter: nf_tables: don't fail inserts if duplicate has expired
- CVE-2023-52924 netfilter: nf_tables: don't skip expired elements during walk
- CVE-2023-52923 netfilter: nf_tables: adapt set backend to use GC transaction API
- CVE-2023-52922 can: bcm: Fix UAF in bcm_proc_show()
- CVE-2023-52921 drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
- CVE-2023-52920 bpf: support non-r10 register spill/fill to/from stack in precision tracking
- CVE-2023-5292 Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-52919 nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- CVE-2023-52918 media: pci: cx23885: check cx23885_vdev_init() return
- CVE-2023-52916 media: aspeed: Fix memory overwrite if timing is 1600x900
- CVE-2023-52915 media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- CVE-2023-52914 io_uring/poll: add hash if ready poll request can't complete inline
- CVE-2023-52913 drm/i915: Fix potential context UAFs
- CVE-2023-52912 drm/amdgpu: Fixed bug on error when unloading amdgpu
- CVE-2023-52911 drm/msm: another fix for the headless Adreno GPU
- CVE-2023-52910 iommu/iova: Fix alloc iova overflows issue
- CVE-2023-5291 Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-52909 nfsd: fix handling of cached open files in nfsd4_open codepath
- CVE-2023-52908 drm/amdgpu: Fix potential NULL dereference
- CVE-2023-52907 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- CVE-2023-52906 net/sched: act_mpls: Fix warning during failed attribute validation
- CVE-2023-52905 octeontx2-pf: Fix resource leakage in VF driver unbind
- CVE-2023-52904 ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
- CVE-2023-52903 io_uring: lock overflowing for IOPOLL
- CVE-2023-52902 nommu: fix memory leak in do_mmap() error path
- CVE-2023-52901 usb: xhci: Check endpoint is valid before dereferencing it
- CVE-2023-52900 nilfs2: fix general protection fault in nilfs_btree_insert()
- CVE-2023-52899 Add exception protection processing for vd in axi_chan_handle_err function
- CVE-2023-52898 xhci: Fix null pointer dereference when host dies
- CVE-2023-52897 btrfs: qgroup: do not warn on record without old_roots populated
- CVE-2023-52896 btrfs: fix race between quota rescan and disable leading to NULL pointer deref
- CVE-2023-52895 io_uring/poll: don't reissue in case of poll race on multishot request
- CVE-2023-52894 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- CVE-2023-52893 gsmi: fix null-deref in gsmi_get_variable
- CVE-2023-52892 Name confusion in x509 Subject Alternative Name fields
- CVE-2023-52891 Denial of service in SIMATIC Energy Manager Basic
- CVE-2023-52890 NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c.
- CVE-2023-5289 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
- CVE-2023-52889 apparmor: Fix null pointer deref when receiving skb during sock creation
- CVE-2023-52888 media: mediatek: vcodec: Only free buffer VA that is not NULL
- CVE-2023-52887 net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- CVE-2023-52886 USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
- CVE-2023-52885 SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
- CVE-2023-52884 Input: cyapa - add missing input core locking to suspend/resume functions
- CVE-2023-52883 drm/amdgpu: Fix possible null pointer dereference
- CVE-2023-52882 clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- CVE-2023-52881 tcp: do not accept ACK of bytes we never sent
- CVE-2023-52880 tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- CVE-2023-5288 Missing authorization in SIM1012
- CVE-2023-52879 tracing: Have trace_event_file have ref counters
- CVE-2023-52878 can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
- CVE-2023-52877 usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
- CVE-2023-52876 clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- CVE-2023-52875 clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- CVE-2023-52874 x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro
- CVE-2023-52873 clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- CVE-2023-52872 tty: n_gsm: fix race condition in status line change on dead connections
- CVE-2023-52871 soc: qcom: llcc: Handle a second device without data corruption
- CVE-2023-52870 clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
- CVE-2023-5287 BEECMS cross site scripting
- CVE-2023-52869 pstore/platform: Add check for kstrdup
- CVE-2023-52868 thermal: core: prevent potential string overflow
- CVE-2023-52867 drm/radeon: possible buffer overflow
- CVE-2023-52866 HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks()
- CVE-2023-52865 clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- CVE-2023-52864 platform/x86: wmi: Fix opening of char device
- CVE-2023-52863 hwmon: (axi-fan-control) Fix possible NULL pointer dereference
- CVE-2023-52862 drm/amd/display: Fix null pointer dereference in error message
- CVE-2023-52861 drm: bridge: it66121: Fix invalid connector dereference
- CVE-2023-52860 drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
- CVE-2023-5286 SourceCodester Expense Tracker App Category add_category.php cross site scripting
- CVE-2023-52859 perf: hisi: Fix use-after-free when register pmu fails
- CVE-2023-52858 clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- CVE-2023-52857 drm/mediatek: Fix coverity issue with unintentional integer overflow
- CVE-2023-52856 drm/bridge: lt8912b: Fix crash on bridge detach
- CVE-2023-52855 usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
- CVE-2023-52854 padata: Fix refcnt handling in padata_free_shell()
- CVE-2023-52853 hid: cp2112: Fix duplicate workqueue initialization
- CVE-2023-52852 f2fs: compress: fix to avoid use-after-free on dic
- CVE-2023-52851 IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF
- CVE-2023-52850 media: hantro: Check whether reset op is defined before use
- CVE-2023-5285 Tongda OA 2017 delete.php sql injection
- CVE-2023-52849 cxl/mem: Fix shutdown order
- CVE-2023-52848 f2fs: fix to drop meta_inode's page cache in f2fs_put_super()
- CVE-2023-52847 media: bttv: fix use after free error due to btv->timeout timer
- CVE-2023-52846 hsr: Prevent use after free in prp_create_tagged_frame()
- CVE-2023-52845 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- CVE-2023-52844 media: vidtv: psi: Add check for kstrdup
- CVE-2023-52843 llc: verify mac len before reading mac header
- CVE-2023-52842 virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()