# Vulnerabilities published in 2023


- [CVE-2023-52841](https://insights.sbomify.com/CVE-2023-52841/): media: vidtv: mux: Add check and kfree for kstrdup (medium 5.5)
- [CVE-2023-52840](https://insights.sbomify.com/CVE-2023-52840/): Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (high 7.8)
- [CVE-2023-5284](https://insights.sbomify.com/CVE-2023-5284/): SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload (medium 6.3)
- [CVE-2023-52839](https://insights.sbomify.com/CVE-2023-52839/): drivers: perf: Do not broadcast to other cpus when starting a counter (low 3.3)
- [CVE-2023-52838](https://insights.sbomify.com/CVE-2023-52838/): fbdev: imsttfb: fix a resource leak in probe (medium 6.2)
- [CVE-2023-52837](https://insights.sbomify.com/CVE-2023-52837/): nbd: fix uaf in nbd_open (high 7.8)
- [CVE-2023-52836](https://insights.sbomify.com/CVE-2023-52836/): locking/ww_mutex/test: Fix potential workqueue corruption (high 7.8)
- [CVE-2023-52835](https://insights.sbomify.com/CVE-2023-52835/): perf/core: Bail out early if the request AUX area is out of bound (high 7.8)
- [CVE-2023-52834](https://insights.sbomify.com/CVE-2023-52834/): atl1c: Work around the DMA RX overflow issue (high 7.5)
- [CVE-2023-52833](https://insights.sbomify.com/CVE-2023-52833/): Bluetooth: btusb: Add date->evt_skb is NULL check (medium 5.5)
- [CVE-2023-52832](https://insights.sbomify.com/CVE-2023-52832/): wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (critical 9.1)
- [CVE-2023-52831](https://insights.sbomify.com/CVE-2023-52831/): cpu/hotplug: Don't offline the last non-isolated CPU (medium 5.5)
- [CVE-2023-5283](https://insights.sbomify.com/CVE-2023-5283/): SourceCodester Engineers Online Portal teacher_signup.php sql injection (medium 6.3)
- [CVE-2023-52829](https://insights.sbomify.com/CVE-2023-52829/): wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() (high 8.4)
- [CVE-2023-52828](https://insights.sbomify.com/CVE-2023-52828/): bpf: Detect IP == ksym.end as part of BPF program (medium 6.6)
- [CVE-2023-52827](https://insights.sbomify.com/CVE-2023-52827/): wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() (high 7.7)
- [CVE-2023-52826](https://insights.sbomify.com/CVE-2023-52826/): drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference (medium 5.5)
- [CVE-2023-52825](https://insights.sbomify.com/CVE-2023-52825/): drm/amdkfd: Fix a race condition of vram buffer unref in svm code (high 7.8)
- [CVE-2023-52821](https://insights.sbomify.com/CVE-2023-52821/): drm/panel: fix a possible null pointer dereference (medium 5.5)
- [CVE-2023-5282](https://insights.sbomify.com/CVE-2023-5282/): SourceCodester Engineers Online Portal seed_message_student.php sql injection (medium 6.3)
- [CVE-2023-52819](https://insights.sbomify.com/CVE-2023-52819/): drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (medium 6.6)
- [CVE-2023-52818](https://insights.sbomify.com/CVE-2023-52818/): drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (high 7.8)
- [CVE-2023-52817](https://insights.sbomify.com/CVE-2023-52817/): drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (medium 5.5)
- [CVE-2023-52816](https://insights.sbomify.com/CVE-2023-52816/): drm/amdkfd: Fix shift out-of-bounds issue (high 7.8)
- [CVE-2023-52815](https://insights.sbomify.com/CVE-2023-52815/): drm/amdgpu/vkms: fix a possible null pointer dereference (medium 5.5)
- [CVE-2023-52814](https://insights.sbomify.com/CVE-2023-52814/): drm/amdgpu: Fix potential null pointer derefernce (medium 5.5)
- [CVE-2023-52813](https://insights.sbomify.com/CVE-2023-52813/): crypto: pcrypt - Fix hungtask for PADATA_RESET (medium 5.5)
- [CVE-2023-52812](https://insights.sbomify.com/CVE-2023-52812/): drm/amd: check num of link levels when update pcie param (high 7.8)
- [CVE-2023-52811](https://insights.sbomify.com/CVE-2023-52811/): scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (medium 5.5)
- [CVE-2023-52810](https://insights.sbomify.com/CVE-2023-52810/): fs/jfs: Add check for negative db_l2nbperpage (high 7.8)
- [CVE-2023-5281](https://insights.sbomify.com/CVE-2023-5281/): SourceCodester Engineers Online Portal remove_inbox_message.php sql injection (medium 6.3)
- [CVE-2023-52809](https://insights.sbomify.com/CVE-2023-52809/): scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (medium 5.5)
- [CVE-2023-52808](https://insights.sbomify.com/CVE-2023-52808/): scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs (medium 5.5)
- [CVE-2023-52807](https://insights.sbomify.com/CVE-2023-52807/): net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs (high 7.8)
- [CVE-2023-52806](https://insights.sbomify.com/CVE-2023-52806/): ALSA: hda: Fix possible null-ptr-deref when assigning a stream (medium 5.5)
- [CVE-2023-52805](https://insights.sbomify.com/CVE-2023-52805/): jfs: fix array-index-out-of-bounds in diAlloc (high 7.8)
- [CVE-2023-52804](https://insights.sbomify.com/CVE-2023-52804/): fs/jfs: Add validity check for db_maxag and db_agpref (high 7.8)
- [CVE-2023-52803](https://insights.sbomify.com/CVE-2023-52803/): SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (medium 5.5)
- [CVE-2023-52801](https://insights.sbomify.com/CVE-2023-52801/): iommufd: Fix missing update of domains_itree after splitting iopt_area (high 8.8)
- [CVE-2023-52800](https://insights.sbomify.com/CVE-2023-52800/): wifi: ath11k: fix htt pktlog locking (medium 4.4)
- [CVE-2023-5280](https://insights.sbomify.com/CVE-2023-5280/): SourceCodester Engineers Online Portal my_students.php sql injection (medium 6.3)
- [CVE-2023-52799](https://insights.sbomify.com/CVE-2023-52799/): jfs: fix array-index-out-of-bounds in dbFindLeaf (high 7.8)
- [CVE-2023-52798](https://insights.sbomify.com/CVE-2023-52798/): wifi: ath11k: fix dfs radar event locking (high 8.8)
- [CVE-2023-52797](https://insights.sbomify.com/CVE-2023-52797/): drivers: perf: Check find_first_bit() return value (medium 5.5)
- [CVE-2023-52796](https://insights.sbomify.com/CVE-2023-52796/): ipvlan: add ipvlan_route_v6_outbound() helper (high 7.8)
- [CVE-2023-52795](https://insights.sbomify.com/CVE-2023-52795/): vhost-vdpa: fix use after free in vhost_vdpa_probe() (high 7.8)
- [CVE-2023-52794](https://insights.sbomify.com/CVE-2023-52794/): thermal: intel: powerclamp: fix mismatch in get function for max_idle (high 7.1)
- [CVE-2023-52792](https://insights.sbomify.com/CVE-2023-52792/): cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails (medium 5.5)
- [CVE-2023-52791](https://insights.sbomify.com/CVE-2023-52791/): i2c: core: Run atomic i2c xfer when !preemptible (medium 5.5)
- [CVE-2023-52790](https://insights.sbomify.com/CVE-2023-52790/): swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC (high 8.8)
- [CVE-2023-5279](https://insights.sbomify.com/CVE-2023-5279/): SourceCodester Engineers Online Portal my_classmates.php sql injection (medium 6.3)
- [CVE-2023-52789](https://insights.sbomify.com/CVE-2023-52789/): tty: vcc: Add check for kstrdup() in vcc_probe() (medium 5.5)
- [CVE-2023-52788](https://insights.sbomify.com/CVE-2023-52788/): i915/perf: Fix NULL deref bugs with drm_dbg() calls (medium 5.5)
- [CVE-2023-52787](https://insights.sbomify.com/CVE-2023-52787/): blk-mq: make sure active queue usage is held for bio_integrity_prep() (medium 5.5)
- [CVE-2023-52786](https://insights.sbomify.com/CVE-2023-52786/): ext4: fix racy may inline data check in dio write (medium 4.7)
- [CVE-2023-52785](https://insights.sbomify.com/CVE-2023-52785/): scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR (medium 4.7)
- [CVE-2023-52784](https://insights.sbomify.com/CVE-2023-52784/): bonding: stop the device in bond_setup_by_slave() (medium 5.5)
- [CVE-2023-52783](https://insights.sbomify.com/CVE-2023-52783/): net: wangxun: fix kernel panic due to null pointer (medium 5.5)
- [CVE-2023-52782](https://insights.sbomify.com/CVE-2023-52782/): net/mlx5e: Track xmit submission to PTP WQ after populating metadata map (medium 5.5)
- [CVE-2023-52781](https://insights.sbomify.com/CVE-2023-52781/): usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (medium 5.5)
- [CVE-2023-52780](https://insights.sbomify.com/CVE-2023-52780/): net: mvneta: fix calls to page_pool_get_stats (medium 5.5)
- [CVE-2023-5278](https://insights.sbomify.com/CVE-2023-5278/): SourceCodester Engineers Online Portal login.php sql injection (medium 6.3)
- [CVE-2023-52779](https://insights.sbomify.com/CVE-2023-52779/): fs: Pass AT_GETATTR_NOSEC flag to getattr interface function (medium 5.5)
- [CVE-2023-52778](https://insights.sbomify.com/CVE-2023-52778/): mptcp: deal with large GSO size (medium 5.5)
- [CVE-2023-52777](https://insights.sbomify.com/CVE-2023-52777/): wifi: ath11k: fix gtk offload status event locking (high 7.8)
- [CVE-2023-52776](https://insights.sbomify.com/CVE-2023-52776/): wifi: ath12k: fix dfs-radar and temperature event locking (high 8.8)
- [CVE-2023-52775](https://insights.sbomify.com/CVE-2023-52775/): net/smc: avoid data corruption caused by decline (high 8.2)
- [CVE-2023-52774](https://insights.sbomify.com/CVE-2023-52774/): s390/dasd: protect device queue against concurrent access (medium 5.5)
- [CVE-2023-52773](https://insights.sbomify.com/CVE-2023-52773/): drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() (medium 5.5)
- [CVE-2023-52772](https://insights.sbomify.com/CVE-2023-52772/): af_unix: fix use-after-free in unix_stream_read_actor() (high 7.8)
- [CVE-2023-52771](https://insights.sbomify.com/CVE-2023-52771/): cxl/port: Fix delete_endpoint() vs parent unregistration race (medium 4.4)
- [CVE-2023-52770](https://insights.sbomify.com/CVE-2023-52770/): f2fs: split initial and dynamic conditions for extent_cache (medium 5.5)
- [CVE-2023-5277](https://insights.sbomify.com/CVE-2023-5277/): SourceCodester Engineers Online Portal student_avatar.php unrestricted upload (medium 6.3)
- [CVE-2023-52769](https://insights.sbomify.com/CVE-2023-52769/): wifi: ath12k: fix htt mlo-offset event locking (high 8.8)
- [CVE-2023-52768](https://insights.sbomify.com/CVE-2023-52768/): wifi: wilc1000: use vmm_table as array in wilc struct (high 7.8)
- [CVE-2023-52767](https://insights.sbomify.com/CVE-2023-52767/): tls: fix NULL deref on tls_sw_splice_eof() with empty record (medium 5.5)
- [CVE-2023-52766](https://insights.sbomify.com/CVE-2023-52766/): i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler (high 7.8)
- [CVE-2023-52765](https://insights.sbomify.com/CVE-2023-52765/): mfd: qcom-spmi-pmic: Fix revid implementation (medium 6.2)
- [CVE-2023-52764](https://insights.sbomify.com/CVE-2023-52764/): media: gspca: cpia1: shift-out-of-bounds in set_flicker (high 7.8)
- [CVE-2023-52763](https://insights.sbomify.com/CVE-2023-52763/): i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. (medium 5.5)
- [CVE-2023-52762](https://insights.sbomify.com/CVE-2023-52762/): virtio-blk: fix implicit overflow on virtio_max_dma_size (medium 5.5)
- [CVE-2023-52761](https://insights.sbomify.com/CVE-2023-52761/): riscv: VMAP_STACK overflow detection thread-safe (high 7.8)
- [CVE-2023-52760](https://insights.sbomify.com/CVE-2023-52760/): gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (high 7.8)
- [CVE-2023-5276](https://insights.sbomify.com/CVE-2023-5276/): SourceCodester Engineers Online Portal downloadable_student.php sql injection (medium 6.3)
- [CVE-2023-52757](https://insights.sbomify.com/CVE-2023-52757/): smb: client: fix potential deadlock when releasing mids (high 7.8)
- [CVE-2023-52755](https://insights.sbomify.com/CVE-2023-52755/): ksmbd: fix slab out of bounds write in smb_inherit_dacl() (critical 9.8)
- [CVE-2023-52754](https://insights.sbomify.com/CVE-2023-52754/): media: imon: fix access to invalid resource for the second interface (medium 5.5)
- [CVE-2023-52753](https://insights.sbomify.com/CVE-2023-52753/): drm/amd/display: Avoid NULL dereference of timing generator (medium 5.5)
- [CVE-2023-52752](https://insights.sbomify.com/CVE-2023-52752/): smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (high 7.8)
- [CVE-2023-52751](https://insights.sbomify.com/CVE-2023-52751/): smb: client: fix use-after-free in smb2_query_info_compound() (high 7.8)
- [CVE-2023-52750](https://insights.sbomify.com/CVE-2023-52750/): arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer (medium 5.5)
- [CVE-2023-5275](https://insights.sbomify.com/CVE-2023-5275/): Denial of service in GX Works2 (low 2.5)
- [CVE-2023-52749](https://insights.sbomify.com/CVE-2023-52749/): spi: Fix null dereference on suspend (medium 4.7)
- [CVE-2023-52748](https://insights.sbomify.com/CVE-2023-52748/): f2fs: avoid format-overflow warning (high 7.8)
- [CVE-2023-52747](https://insights.sbomify.com/CVE-2023-52747/): IB/hfi1: Restore allocated resources on failed copyout (medium 5.5)
- [CVE-2023-52746](https://insights.sbomify.com/CVE-2023-52746/): xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() (low 2.5)
- [CVE-2023-52745](https://insights.sbomify.com/CVE-2023-52745/): IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (high 7.8)
- [CVE-2023-52744](https://insights.sbomify.com/CVE-2023-52744/): RDMA/irdma: Fix potential NULL-ptr-dereference (medium 5.5)
- [CVE-2023-52743](https://insights.sbomify.com/CVE-2023-52743/): ice: Do not use WQ_MEM_RECLAIM flag for workqueue (medium 5.5)
- [CVE-2023-52742](https://insights.sbomify.com/CVE-2023-52742/): net: USB: Fix wrong-direction WARNING in plusb.c (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/157/