Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 157 of 430.
- CVE-2023-52841 media: vidtv: mux: Add check and kfree for kstrdup
- CVE-2023-52840 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- CVE-2023-5284 SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload
- CVE-2023-52839 drivers: perf: Do not broadcast to other cpus when starting a counter
- CVE-2023-52838 fbdev: imsttfb: fix a resource leak in probe
- CVE-2023-52837 nbd: fix uaf in nbd_open
- CVE-2023-52836 locking/ww_mutex/test: Fix potential workqueue corruption
- CVE-2023-52835 perf/core: Bail out early if the request AUX area is out of bound
- CVE-2023-52834 atl1c: Work around the DMA RX overflow issue
- CVE-2023-52833 Bluetooth: btusb: Add date->evt_skb is NULL check
- CVE-2023-52832 wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- CVE-2023-52831 cpu/hotplug: Don't offline the last non-isolated CPU
- CVE-2023-5283 SourceCodester Engineers Online Portal teacher_signup.php sql injection
- CVE-2023-52829 wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()
- CVE-2023-52828 bpf: Detect IP == ksym.end as part of BPF program
- CVE-2023-52827 wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()
- CVE-2023-52826 drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference
- CVE-2023-52825 drm/amdkfd: Fix a race condition of vram buffer unref in svm code
- CVE-2023-52821 drm/panel: fix a possible null pointer dereference
- CVE-2023-5282 SourceCodester Engineers Online Portal seed_message_student.php sql injection
- CVE-2023-52819 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- CVE-2023-52818 drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- CVE-2023-52817 drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- CVE-2023-52816 drm/amdkfd: Fix shift out-of-bounds issue
- CVE-2023-52815 drm/amdgpu/vkms: fix a possible null pointer dereference
- CVE-2023-52814 drm/amdgpu: Fix potential null pointer derefernce
- CVE-2023-52813 crypto: pcrypt - Fix hungtask for PADATA_RESET
- CVE-2023-52812 drm/amd: check num of link levels when update pcie param
- CVE-2023-52811 scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool
- CVE-2023-52810 fs/jfs: Add check for negative db_l2nbperpage
- CVE-2023-5281 SourceCodester Engineers Online Portal remove_inbox_message.php sql injection
- CVE-2023-52809 scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- CVE-2023-52808 scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
- CVE-2023-52807 net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
- CVE-2023-52806 ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- CVE-2023-52805 jfs: fix array-index-out-of-bounds in diAlloc
- CVE-2023-52804 fs/jfs: Add validity check for db_maxag and db_agpref
- CVE-2023-52803 SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- CVE-2023-52801 iommufd: Fix missing update of domains_itree after splitting iopt_area
- CVE-2023-52800 wifi: ath11k: fix htt pktlog locking
- CVE-2023-5280 SourceCodester Engineers Online Portal my_students.php sql injection
- CVE-2023-52799 jfs: fix array-index-out-of-bounds in dbFindLeaf
- CVE-2023-52798 wifi: ath11k: fix dfs radar event locking
- CVE-2023-52797 drivers: perf: Check find_first_bit() return value
- CVE-2023-52796 ipvlan: add ipvlan_route_v6_outbound() helper
- CVE-2023-52795 vhost-vdpa: fix use after free in vhost_vdpa_probe()
- CVE-2023-52794 thermal: intel: powerclamp: fix mismatch in get function for max_idle
- CVE-2023-52792 cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails
- CVE-2023-52791 i2c: core: Run atomic i2c xfer when !preemptible
- CVE-2023-52790 swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC
- CVE-2023-5279 SourceCodester Engineers Online Portal my_classmates.php sql injection
- CVE-2023-52789 tty: vcc: Add check for kstrdup() in vcc_probe()
- CVE-2023-52788 i915/perf: Fix NULL deref bugs with drm_dbg() calls
- CVE-2023-52787 blk-mq: make sure active queue usage is held for bio_integrity_prep()
- CVE-2023-52786 ext4: fix racy may inline data check in dio write
- CVE-2023-52785 scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR
- CVE-2023-52784 bonding: stop the device in bond_setup_by_slave()
- CVE-2023-52783 net: wangxun: fix kernel panic due to null pointer
- CVE-2023-52782 net/mlx5e: Track xmit submission to PTP WQ after populating metadata map
- CVE-2023-52781 usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- CVE-2023-52780 net: mvneta: fix calls to page_pool_get_stats
- CVE-2023-5278 SourceCodester Engineers Online Portal login.php sql injection
- CVE-2023-52779 fs: Pass AT_GETATTR_NOSEC flag to getattr interface function
- CVE-2023-52778 mptcp: deal with large GSO size
- CVE-2023-52777 wifi: ath11k: fix gtk offload status event locking
- CVE-2023-52776 wifi: ath12k: fix dfs-radar and temperature event locking
- CVE-2023-52775 net/smc: avoid data corruption caused by decline
- CVE-2023-52774 s390/dasd: protect device queue against concurrent access
- CVE-2023-52773 drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer()
- CVE-2023-52772 af_unix: fix use-after-free in unix_stream_read_actor()
- CVE-2023-52771 cxl/port: Fix delete_endpoint() vs parent unregistration race
- CVE-2023-52770 f2fs: split initial and dynamic conditions for extent_cache
- CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload
- CVE-2023-52769 wifi: ath12k: fix htt mlo-offset event locking
- CVE-2023-52768 wifi: wilc1000: use vmm_table as array in wilc struct
- CVE-2023-52767 tls: fix NULL deref on tls_sw_splice_eof() with empty record
- CVE-2023-52766 i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler
- CVE-2023-52765 mfd: qcom-spmi-pmic: Fix revid implementation
- CVE-2023-52764 media: gspca: cpia1: shift-out-of-bounds in set_flicker
- CVE-2023-52763 i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.
- CVE-2023-52762 virtio-blk: fix implicit overflow on virtio_max_dma_size
- CVE-2023-52761 riscv: VMAP_STACK overflow detection thread-safe
- CVE-2023-52760 gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
- CVE-2023-5276 SourceCodester Engineers Online Portal downloadable_student.php sql injection
- CVE-2023-52757 smb: client: fix potential deadlock when releasing mids
- CVE-2023-52755 ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- CVE-2023-52754 media: imon: fix access to invalid resource for the second interface
- CVE-2023-52753 drm/amd/display: Avoid NULL dereference of timing generator
- CVE-2023-52752 smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
- CVE-2023-52751 smb: client: fix use-after-free in smb2_query_info_compound()
- CVE-2023-52750 arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- CVE-2023-5275 Denial of service in GX Works2
- CVE-2023-52749 spi: Fix null dereference on suspend
- CVE-2023-52748 f2fs: avoid format-overflow warning
- CVE-2023-52747 IB/hfi1: Restore allocated resources on failed copyout
- CVE-2023-52746 xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- CVE-2023-52745 IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- CVE-2023-52744 RDMA/irdma: Fix potential NULL-ptr-dereference
- CVE-2023-52743 ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- CVE-2023-52742 net: USB: Fix wrong-direction WARNING in plusb.c