# Vulnerabilities published in 2023


- [CVE-2023-52934](https://insights.sbomify.com/CVE-2023-52934/): mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups (high 7.8)
- [CVE-2023-52933](https://insights.sbomify.com/CVE-2023-52933/): Squashfs: fix handling and sanity checking of xattr_ids count (medium 5.5)
- [CVE-2023-52932](https://insights.sbomify.com/CVE-2023-52932/): mm/swapfile: add cond_resched() in get_swap_pages() (medium 5.5)
- [CVE-2023-52931](https://insights.sbomify.com/CVE-2023-52931/): drm/i915: Avoid potential vm use-after-free (high 7.8)
- [CVE-2023-52930](https://insights.sbomify.com/CVE-2023-52930/): drm/i915: Fix potential bit_17 double-free (high 7.8)
- [CVE-2023-5293](https://insights.sbomify.com/CVE-2023-5293/): ECshop leancloud.php sql injection (medium 4.7)
- [CVE-2023-52929](https://insights.sbomify.com/CVE-2023-52929/): nvmem: core: fix cleanup after dev_set_name() (medium 5.5)
- [CVE-2023-52928](https://insights.sbomify.com/CVE-2023-52928/): bpf: Skip invalid kfunc call in backtrack_insn (medium 5.5)
- [CVE-2023-52927](https://insights.sbomify.com/CVE-2023-52927/): netfilter: allow exp not to be removed in nf_ct_find_expectation (high 7.8)
- [CVE-2023-52926](https://insights.sbomify.com/CVE-2023-52926/): io_uring/rw: split io_read() into a helper (high 7.8)
- [CVE-2023-52925](https://insights.sbomify.com/CVE-2023-52925/): netfilter: nf_tables: don't fail inserts if duplicate has expired (medium 6.2)
- [CVE-2023-52924](https://insights.sbomify.com/CVE-2023-52924/): netfilter: nf_tables: don't skip expired elements during walk (medium 5.5)
- [CVE-2023-52923](https://insights.sbomify.com/CVE-2023-52923/): netfilter: nf_tables: adapt set backend to use GC transaction API (high 7.8)
- [CVE-2023-52922](https://insights.sbomify.com/CVE-2023-52922/): can: bcm: Fix UAF in bcm_proc_show() (high 7.8)
- [CVE-2023-52921](https://insights.sbomify.com/CVE-2023-52921/): drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (high 7.8)
- [CVE-2023-52920](https://insights.sbomify.com/CVE-2023-52920/): bpf: support non-r10 register spill/fill to/from stack in precision tracking (high 7.8)
- [CVE-2023-5292](https://insights.sbomify.com/CVE-2023-5292/): Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-52919](https://insights.sbomify.com/CVE-2023-52919/): nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (medium 5.5)
- [CVE-2023-52918](https://insights.sbomify.com/CVE-2023-52918/): media: pci: cx23885: check cx23885_vdev_init() return (medium 5.5)
- [CVE-2023-52916](https://insights.sbomify.com/CVE-2023-52916/): media: aspeed: Fix memory overwrite if timing is 1600x900 (high 7.8)
- [CVE-2023-52915](https://insights.sbomify.com/CVE-2023-52915/): media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (medium 5.5)
- [CVE-2023-52914](https://insights.sbomify.com/CVE-2023-52914/): io_uring/poll: add hash if ready poll request can't complete inline (medium 5.5)
- [CVE-2023-52913](https://insights.sbomify.com/CVE-2023-52913/): drm/i915: Fix potential context UAFs (high 7.8)
- [CVE-2023-52912](https://insights.sbomify.com/CVE-2023-52912/): drm/amdgpu: Fixed bug on error when unloading amdgpu (medium 5.5)
- [CVE-2023-52911](https://insights.sbomify.com/CVE-2023-52911/): drm/msm: another fix for the headless Adreno GPU (medium 5.5)
- [CVE-2023-52910](https://insights.sbomify.com/CVE-2023-52910/): iommu/iova: Fix alloc iova overflows issue (high 8.8)
- [CVE-2023-5291](https://insights.sbomify.com/CVE-2023-5291/): Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2023-52909](https://insights.sbomify.com/CVE-2023-52909/): nfsd: fix handling of cached open files in nfsd4_open codepath (high 7.5)
- [CVE-2023-52908](https://insights.sbomify.com/CVE-2023-52908/): drm/amdgpu: Fix potential NULL dereference (medium 5.5)
- [CVE-2023-52907](https://insights.sbomify.com/CVE-2023-52907/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (high 7.8)
- [CVE-2023-52906](https://insights.sbomify.com/CVE-2023-52906/): net/sched: act_mpls: Fix warning during failed attribute validation (high 7.8)
- [CVE-2023-52905](https://insights.sbomify.com/CVE-2023-52905/): octeontx2-pf: Fix resource leakage in VF driver unbind (medium 5.5)
- [CVE-2023-52904](https://insights.sbomify.com/CVE-2023-52904/): ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (medium 5.5)
- [CVE-2023-52903](https://insights.sbomify.com/CVE-2023-52903/): io_uring: lock overflowing for IOPOLL (high 7.8)
- [CVE-2023-52902](https://insights.sbomify.com/CVE-2023-52902/): nommu: fix memory leak in do_mmap() error path (medium 5.5)
- [CVE-2023-52901](https://insights.sbomify.com/CVE-2023-52901/): usb: xhci: Check endpoint is valid before dereferencing it (medium 5.5)
- [CVE-2023-52900](https://insights.sbomify.com/CVE-2023-52900/): nilfs2: fix general protection fault in nilfs_btree_insert() (medium 5.5)
- [CVE-2023-52899](https://insights.sbomify.com/CVE-2023-52899/): Add exception protection processing for vd in axi_chan_handle_err function (medium 5.5)
- [CVE-2023-52898](https://insights.sbomify.com/CVE-2023-52898/): xhci: Fix null pointer dereference when host dies (medium 4.7)
- [CVE-2023-52897](https://insights.sbomify.com/CVE-2023-52897/): btrfs: qgroup: do not warn on record without old_roots populated (medium 4.7)
- [CVE-2023-52896](https://insights.sbomify.com/CVE-2023-52896/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (medium 4.7)
- [CVE-2023-52895](https://insights.sbomify.com/CVE-2023-52895/): io_uring/poll: don't reissue in case of poll race on multishot request (medium 5.5)
- [CVE-2023-52894](https://insights.sbomify.com/CVE-2023-52894/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (medium 5.5)
- [CVE-2023-52893](https://insights.sbomify.com/CVE-2023-52893/): gsmi: fix null-deref in gsmi_get_variable (medium 5.5)
- [CVE-2023-52892](https://insights.sbomify.com/CVE-2023-52892/): Name confusion in x509 Subject Alternative Name fields (high 7.5)
- [CVE-2023-52891](https://insights.sbomify.com/CVE-2023-52891/): Denial of service in SIMATIC Energy Manager Basic (medium 5.3)
- [CVE-2023-52890](https://insights.sbomify.com/CVE-2023-52890/): NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. (medium 4.5)
- [CVE-2023-5289](https://insights.sbomify.com/CVE-2023-5289/): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (high 7.1)
- [CVE-2023-52889](https://insights.sbomify.com/CVE-2023-52889/): apparmor: Fix null pointer deref when receiving skb during sock creation (medium 5.5)
- [CVE-2023-52888](https://insights.sbomify.com/CVE-2023-52888/): media: mediatek: vcodec: Only free buffer VA that is not NULL (medium 5.5)
- [CVE-2023-52887](https://insights.sbomify.com/CVE-2023-52887/): net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (high 7.5)
- [CVE-2023-52886](https://insights.sbomify.com/CVE-2023-52886/): USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() (medium 6.4)
- [CVE-2023-52885](https://insights.sbomify.com/CVE-2023-52885/): SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (high 8.1)
- [CVE-2023-52884](https://insights.sbomify.com/CVE-2023-52884/): Input: cyapa - add missing input core locking to suspend/resume functions (medium 4.4)
- [CVE-2023-52883](https://insights.sbomify.com/CVE-2023-52883/): drm/amdgpu: Fix possible null pointer dereference (high 7.5)
- [CVE-2023-52882](https://insights.sbomify.com/CVE-2023-52882/): clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (medium 5.5)
- [CVE-2023-52881](https://insights.sbomify.com/CVE-2023-52881/): tcp: do not accept ACK of bytes we never sent (critical 9.8)
- [CVE-2023-52880](https://insights.sbomify.com/CVE-2023-52880/): tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (high 7.8)
- [CVE-2023-5288](https://insights.sbomify.com/CVE-2023-5288/): Missing authorization in SIM1012 (critical 9.8)
- [CVE-2023-52879](https://insights.sbomify.com/CVE-2023-52879/): tracing: Have trace_event_file have ref counters (high 7.8)
- [CVE-2023-52878](https://insights.sbomify.com/CVE-2023-52878/): can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (medium 5.5)
- [CVE-2023-52877](https://insights.sbomify.com/CVE-2023-52877/): usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (medium 5.5)
- [CVE-2023-52876](https://insights.sbomify.com/CVE-2023-52876/): clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (medium 5.5)
- [CVE-2023-52875](https://insights.sbomify.com/CVE-2023-52875/): clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (medium 5.5)
- [CVE-2023-52874](https://insights.sbomify.com/CVE-2023-52874/): x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro (high 7.1)
- [CVE-2023-52873](https://insights.sbomify.com/CVE-2023-52873/): clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (medium 5.5)
- [CVE-2023-52872](https://insights.sbomify.com/CVE-2023-52872/): tty: n_gsm: fix race condition in status line change on dead connections (high 7.8)
- [CVE-2023-52871](https://insights.sbomify.com/CVE-2023-52871/): soc: qcom: llcc: Handle a second device without data corruption (high 7.1)
- [CVE-2023-52870](https://insights.sbomify.com/CVE-2023-52870/): clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data (medium 4.1)
- [CVE-2023-5287](https://insights.sbomify.com/CVE-2023-5287/): BEECMS cross site scripting (low 2.4)
- [CVE-2023-52869](https://insights.sbomify.com/CVE-2023-52869/): pstore/platform: Add check for kstrdup (medium 5.5)
- [CVE-2023-52868](https://insights.sbomify.com/CVE-2023-52868/): thermal: core: prevent potential string overflow (high 7.8)
- [CVE-2023-52867](https://insights.sbomify.com/CVE-2023-52867/): drm/radeon: possible buffer overflow (high 7.1)
- [CVE-2023-52866](https://insights.sbomify.com/CVE-2023-52866/): HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks() (high 7.1)
- [CVE-2023-52865](https://insights.sbomify.com/CVE-2023-52865/): clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (medium 5.5)
- [CVE-2023-52864](https://insights.sbomify.com/CVE-2023-52864/): platform/x86: wmi: Fix opening of char device (high 7.0)
- [CVE-2023-52863](https://insights.sbomify.com/CVE-2023-52863/): hwmon: (axi-fan-control) Fix possible NULL pointer dereference (medium 5.5)
- [CVE-2023-52862](https://insights.sbomify.com/CVE-2023-52862/): drm/amd/display: Fix null pointer dereference in error message (medium 4.1)
- [CVE-2023-52861](https://insights.sbomify.com/CVE-2023-52861/): drm: bridge: it66121: Fix invalid connector dereference (medium 6.2)
- [CVE-2023-52860](https://insights.sbomify.com/CVE-2023-52860/): drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process (medium 5.5)
- [CVE-2023-5286](https://insights.sbomify.com/CVE-2023-5286/): SourceCodester Expense Tracker App Category add_category.php cross site scripting (low 3.5)
- [CVE-2023-52859](https://insights.sbomify.com/CVE-2023-52859/): perf: hisi: Fix use-after-free when register pmu fails (high 7.8)
- [CVE-2023-52858](https://insights.sbomify.com/CVE-2023-52858/): clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (medium 6.2)
- [CVE-2023-52857](https://insights.sbomify.com/CVE-2023-52857/): drm/mediatek: Fix coverity issue with unintentional integer overflow (medium 5.5)
- [CVE-2023-52856](https://insights.sbomify.com/CVE-2023-52856/): drm/bridge: lt8912b: Fix crash on bridge detach (medium 5.5)
- [CVE-2023-52855](https://insights.sbomify.com/CVE-2023-52855/): usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (medium 5.5)
- [CVE-2023-52854](https://insights.sbomify.com/CVE-2023-52854/): padata: Fix refcnt handling in padata_free_shell() (high 7.8)
- [CVE-2023-52853](https://insights.sbomify.com/CVE-2023-52853/): hid: cp2112: Fix duplicate workqueue initialization (medium 5.5)
- [CVE-2023-52852](https://insights.sbomify.com/CVE-2023-52852/): f2fs: compress: fix to avoid use-after-free on dic (high 7.8)
- [CVE-2023-52851](https://insights.sbomify.com/CVE-2023-52851/): IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF (high 7.8)
- [CVE-2023-52850](https://insights.sbomify.com/CVE-2023-52850/): media: hantro: Check whether reset op is defined before use (medium 5.5)
- [CVE-2023-5285](https://insights.sbomify.com/CVE-2023-5285/): Tongda OA 2017 delete.php sql injection (medium 6.3)
- [CVE-2023-52849](https://insights.sbomify.com/CVE-2023-52849/): cxl/mem: Fix shutdown order (medium 5.5)
- [CVE-2023-52848](https://insights.sbomify.com/CVE-2023-52848/): f2fs: fix to drop meta_inode's page cache in f2fs_put_super() (medium 5.5)
- [CVE-2023-52847](https://insights.sbomify.com/CVE-2023-52847/): media: bttv: fix use after free error due to btv->timeout timer (high 7.8)
- [CVE-2023-52846](https://insights.sbomify.com/CVE-2023-52846/): hsr: Prevent use after free in prp_create_tagged_frame() (high 8.8)
- [CVE-2023-52845](https://insights.sbomify.com/CVE-2023-52845/): tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (high 7.1)
- [CVE-2023-52844](https://insights.sbomify.com/CVE-2023-52844/): media: vidtv: psi: Add check for kstrdup (medium 6.2)
- [CVE-2023-52843](https://insights.sbomify.com/CVE-2023-52843/): llc: verify mac len before reading mac header (medium 5.5)
- [CVE-2023-52842](https://insights.sbomify.com/CVE-2023-52842/): virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/156/