# Vulnerabilities published in 2023


- [CVE-2023-52741](https://insights.sbomify.com/CVE-2023-52741/): cifs: Fix use-after-free in rdata->read_into_pages() (critical 9.8)
- [CVE-2023-52740](https://insights.sbomify.com/CVE-2023-52740/): powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (medium 4.7)
- [CVE-2023-5274](https://insights.sbomify.com/CVE-2023-5274/): Denial of service in GX Works2 (low 2.5)
- [CVE-2023-52739](https://insights.sbomify.com/CVE-2023-52739/): Fix page corruption caused by racy check in __free_pages (high 7.8)
- [CVE-2023-52738](https://insights.sbomify.com/CVE-2023-52738/): drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (medium 5.3)
- [CVE-2023-52737](https://insights.sbomify.com/CVE-2023-52737/): btrfs: lock the inode in shared mode before starting fiemap (medium 5.5)
- [CVE-2023-52736](https://insights.sbomify.com/CVE-2023-52736/): ALSA: hda: Do not unset preset when cleaning up codec (medium 5.5)
- [CVE-2023-52735](https://insights.sbomify.com/CVE-2023-52735/): bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (critical 9.1)
- [CVE-2023-52732](https://insights.sbomify.com/CVE-2023-52732/): ceph: blocklist the kclient when receiving corrupted snap trace (critical 9.8)
- [CVE-2023-52731](https://insights.sbomify.com/CVE-2023-52731/): fbdev: Fix invalid page access after closing deferred I/O devices (high 7.8)
- [CVE-2023-52730](https://insights.sbomify.com/CVE-2023-52730/): mmc: sdio: fix possible resource leaks in some error paths (medium 5.5)
- [CVE-2023-5273](https://insights.sbomify.com/CVE-2023-5273/): SourceCodester Best Courier Management System manage_parcel_status.php cross site scripting (low 3.5)
- [CVE-2023-52729](https://insights.sbomify.com/CVE-2023-52729/): TCPServer.cpp in SimpleNetwork through 29bc615 has an off-by-one error that causes a buffer overflow when trying to add '\0' to the end of long msg data. (high 7.5)
- [CVE-2023-52728](https://insights.sbomify.com/CVE-2023-52728/): Memory corruption in linuxfoundation:onos-lib-go (medium 5.5)
- [CVE-2023-52727](https://insights.sbomify.com/CVE-2023-52727/): Memory corruption in linuxfoundation:onos-lib-go (high 8.1)
- [CVE-2023-52726](https://insights.sbomify.com/CVE-2023-52726/): Denial of service in linuxfoundation:onos-ric-sdk-go (medium 6.5)
- [CVE-2023-52725](https://insights.sbomify.com/CVE-2023-52725/): Memory corruption in linuxfoundation:onos-kpimon (medium 6.5)
- [CVE-2023-52724](https://insights.sbomify.com/CVE-2023-52724/): Memory corruption in linuxfoundation:onos-kpimon (high 8.1)
- [CVE-2023-52723](https://insights.sbomify.com/CVE-2023-52723/): In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is acciden (high 7.1)
- [CVE-2023-52722](https://insights.sbomify.com/CVE-2023-52722/): Security feature bypass in artifex:ghostscript (medium 5.5)
- [CVE-2023-52721](https://insights.sbomify.com/CVE-2023-52721/): Missing authorization in EMUI (medium 6.2)
- [CVE-2023-52720](https://insights.sbomify.com/CVE-2023-52720/): Race condition in EMUI (medium 4.1)
- [CVE-2023-5272](https://insights.sbomify.com/CVE-2023-5272/): SourceCodester Best Courier Management System GET Parameter edit_parcel.php sql injection (medium 5.5)
- [CVE-2023-52719](https://insights.sbomify.com/CVE-2023-52719/): Privilege escalation in EMUI (high 7.1)
- [CVE-2023-52718](https://insights.sbomify.com/CVE-2023-52718/): Other in PT9030-15 (medium 6.4)
- [CVE-2023-52717](https://insights.sbomify.com/CVE-2023-52717/): Missing authorization in EMUI (medium 5.3)
- [CVE-2023-52716](https://insights.sbomify.com/CVE-2023-52716/): Other in EMUI (high 7.5)
- [CVE-2023-52715](https://insights.sbomify.com/CVE-2023-52715/): Misconfiguration in HarmonyOS (high 7.5)
- [CVE-2023-52714](https://insights.sbomify.com/CVE-2023-52714/): Information disclosure in EMUI (high 7.5)
- [CVE-2023-52713](https://insights.sbomify.com/CVE-2023-52713/): Missing authorization in EMUI (high 7.7)
- [CVE-2023-52712](https://insights.sbomify.com/CVE-2023-52712/): Security feature bypass in CurieM-WFG9B (high 7.8)
- [CVE-2023-52711](https://insights.sbomify.com/CVE-2023-52711/): Security feature bypass in CurieM-WFG9B (high 7.8)
- [CVE-2023-52710](https://insights.sbomify.com/CVE-2023-52710/): Memory corruption in CurieM-WFG9B (high 7.8)
- [CVE-2023-5271](https://insights.sbomify.com/CVE-2023-5271/): SourceCodester Best Courier Management System edit_parcel.php sql injection (medium 5.5)
- [CVE-2023-52708](https://insights.sbomify.com/CVE-2023-52708/): mmc: mmc_spi: fix error handling in mmc_spi_probe() (medium 5.5)
- [CVE-2023-52707](https://insights.sbomify.com/CVE-2023-52707/): sched/psi: Fix use-after-free in ep_remove_wait_queue() (high 7.8)
- [CVE-2023-52706](https://insights.sbomify.com/CVE-2023-52706/): gpio: sim: fix a memory leak (medium 5.5)
- [CVE-2023-52705](https://insights.sbomify.com/CVE-2023-52705/): nilfs2: fix underflow in second superblock position calculations (medium 5.5)
- [CVE-2023-52704](https://insights.sbomify.com/CVE-2023-52704/): freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL (high 7.8)
- [CVE-2023-52703](https://insights.sbomify.com/CVE-2023-52703/): net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (low 3.3)
- [CVE-2023-52702](https://insights.sbomify.com/CVE-2023-52702/): net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (medium 5.5)
- [CVE-2023-52701](https://insights.sbomify.com/CVE-2023-52701/): net: use a bounce buffer for copying skb->mark (high 7.1)
- [CVE-2023-52700](https://insights.sbomify.com/CVE-2023-52700/): tipc: fix kernel warning when sending SYN message (medium 5.5)
- [CVE-2023-5270](https://insights.sbomify.com/CVE-2023-5270/): SourceCodester Best Courier Management System view_parcel.php sql injection (medium 5.5)
- [CVE-2023-52699](https://insights.sbomify.com/CVE-2023-52699/): sysv: don't call sb_bread() with pointers_lock held (medium 5.3)
- [CVE-2023-52698](https://insights.sbomify.com/CVE-2023-52698/): calipso: fix memory leak in netlbl_calipso_add_pass() (medium 5.5)
- [CVE-2023-52697](https://insights.sbomify.com/CVE-2023-52697/): ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL (high 7.1)
- [CVE-2023-52696](https://insights.sbomify.com/CVE-2023-52696/): powerpc/powernv: Add a null pointer check in opal_powercap_init() (high 7.5)
- [CVE-2023-52695](https://insights.sbomify.com/CVE-2023-52695/): drm/amd/display: Check writeback connectors in create_validate_stream_for_sink (medium 5.5)
- [CVE-2023-52694](https://insights.sbomify.com/CVE-2023-52694/): drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function (medium 5.5)
- [CVE-2023-52693](https://insights.sbomify.com/CVE-2023-52693/): ACPI: video: check for error while searching for backlight device parent (medium 5.5)
- [CVE-2023-52692](https://insights.sbomify.com/CVE-2023-52692/): ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() (medium 5.5)
- [CVE-2023-52691](https://insights.sbomify.com/CVE-2023-52691/): drm/amd/pm: fix a double-free in si_dpm_init (high 7.8)
- [CVE-2023-52690](https://insights.sbomify.com/CVE-2023-52690/): powerpc/powernv: Add a null pointer check to scom_debug_init_one() (medium 5.5)
- [CVE-2023-5269](https://insights.sbomify.com/CVE-2023-5269/): SourceCodester Best Courier Management System GET Parameter parcel_list.php sql injection (medium 5.1)
- [CVE-2023-52689](https://insights.sbomify.com/CVE-2023-52689/): ALSA: scarlett2: Add missing mutex lock around get meter levels (medium 5.5)
- [CVE-2023-52688](https://insights.sbomify.com/CVE-2023-52688/): wifi: ath12k: fix the error handler of rfkill config (high 7.8)
- [CVE-2023-52687](https://insights.sbomify.com/CVE-2023-52687/): crypto: safexcel - Add error handling for dma_map_sg() calls (critical 9.8)
- [CVE-2023-52686](https://insights.sbomify.com/CVE-2023-52686/): powerpc/powernv: Add a null pointer check in opal_event_init() (medium 5.5)
- [CVE-2023-52684](https://insights.sbomify.com/CVE-2023-52684/): firmware: qcom: qseecom: fix memory leaks in error paths (medium 5.5)
- [CVE-2023-52683](https://insights.sbomify.com/CVE-2023-52683/): ACPI: LPIT: Avoid u32 multiplication overflow (medium 5.5)
- [CVE-2023-52682](https://insights.sbomify.com/CVE-2023-52682/): f2fs: fix to wait on block writeback for post_read case (high 7.1)
- [CVE-2023-52681](https://insights.sbomify.com/CVE-2023-52681/): efivarfs: Free s_fs_info on unmount (medium 5.5)
- [CVE-2023-52680](https://insights.sbomify.com/CVE-2023-52680/): ALSA: scarlett2: Add missing error checks to *_ctl_get() (medium 5.5)
- [CVE-2023-5268](https://insights.sbomify.com/CVE-2023-5268/): DedeBIZ makehtml_taglist_action.php sql injection (medium 6.3)
- [CVE-2023-52679](https://insights.sbomify.com/CVE-2023-52679/): of: Fix double free in of_parse_phandle_with_args_map (high 7.8)
- [CVE-2023-52678](https://insights.sbomify.com/CVE-2023-52678/): drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c (high 7.8)
- [CVE-2023-52677](https://insights.sbomify.com/CVE-2023-52677/): riscv: Check if the code to patch lies in the exit section (medium 5.5)
- [CVE-2023-52676](https://insights.sbomify.com/CVE-2023-52676/): bpf: Guard stack limits against 32bit overflow (high 7.8)
- [CVE-2023-52675](https://insights.sbomify.com/CVE-2023-52675/): powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (medium 5.5)
- [CVE-2023-52674](https://insights.sbomify.com/CVE-2023-52674/): ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() (medium 5.5)
- [CVE-2023-52673](https://insights.sbomify.com/CVE-2023-52673/): drm/amd/display: Fix a debugfs null pointer error (medium 5.5)
- [CVE-2023-52672](https://insights.sbomify.com/CVE-2023-52672/): pipe: wakeup wr_wait after setting max_usage (high 7.0)
- [CVE-2023-52671](https://insights.sbomify.com/CVE-2023-52671/): drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 (medium 5.5)
- [CVE-2023-52670](https://insights.sbomify.com/CVE-2023-52670/): rpmsg: virtio: Free driver_override when rpmsg_remove() (medium 6.6)
- [CVE-2023-5267](https://insights.sbomify.com/CVE-2023-5267/): Tongda OA 2017 delete.php sql injection (medium 5.5)
- [CVE-2023-52669](https://insights.sbomify.com/CVE-2023-52669/): crypto: s390/aes - Fix buffer overread in CTR mode (high 8.2)
- [CVE-2023-52668](https://insights.sbomify.com/CVE-2023-52668/): btrfs: zoned: fix lock ordering in btrfs_zone_activate() (medium 5.5)
- [CVE-2023-52667](https://insights.sbomify.com/CVE-2023-52667/): net/mlx5e: fix a potential double-free in fs_any_create_groups (high 7.8)
- [CVE-2023-52664](https://insights.sbomify.com/CVE-2023-52664/): net: atlantic: eliminate double free in error handling logic (high 7.8)
- [CVE-2023-52663](https://insights.sbomify.com/CVE-2023-52663/): ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() (medium 5.5)
- [CVE-2023-52662](https://insights.sbomify.com/CVE-2023-52662/): drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (high 7.8)
- [CVE-2023-52661](https://insights.sbomify.com/CVE-2023-52661/): drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() (medium 5.5)
- [CVE-2023-52660](https://insights.sbomify.com/CVE-2023-52660/): media: rkisp1: Fix IRQ handling due to shared interrupts (medium 5.5)
- [CVE-2023-5266](https://insights.sbomify.com/CVE-2023-5266/): DedeBIZ tags_main.php sql injection (medium 6.3)
- [CVE-2023-52659](https://insights.sbomify.com/CVE-2023-52659/): x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (medium 5.5)
- [CVE-2023-52658](https://insights.sbomify.com/CVE-2023-52658/): Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (medium 5.5)
- [CVE-2023-52657](https://insights.sbomify.com/CVE-2023-52657/): Revert "drm/amd/pm: resolve reboot exception for si oland" (medium 5.5)
- [CVE-2023-52656](https://insights.sbomify.com/CVE-2023-52656/): io_uring: drop any code related to SCM_RIGHTS (high 7.8)
- [CVE-2023-52655](https://insights.sbomify.com/CVE-2023-52655/): usb: aqc111: check packet for fixup for true limit (medium 5.5)
- [CVE-2023-52654](https://insights.sbomify.com/CVE-2023-52654/): io_uring/af_unix: disable sending io_uring over sockets (high 7.8)
- [CVE-2023-52653](https://insights.sbomify.com/CVE-2023-52653/): SUNRPC: fix a memleak in gss_import_v2_context (medium 5.5)
- [CVE-2023-52652](https://insights.sbomify.com/CVE-2023-52652/): NTB: fix possible name leak in ntb_register_device() (medium 5.5)
- [CVE-2023-52650](https://insights.sbomify.com/CVE-2023-52650/): drm/tegra: dsi: Add missing check for of_find_device_by_node (medium 5.5)
- [CVE-2023-5265](https://insights.sbomify.com/CVE-2023-5265/): Tongda OA 2017 delete.php sql injection (medium 5.5)
- [CVE-2023-52649](https://insights.sbomify.com/CVE-2023-52649/): drm/vkms: Avoid reading beyond LUT array (high 7.8)
- [CVE-2023-52648](https://insights.sbomify.com/CVE-2023-52648/): drm/vmwgfx: Unmap the surface before resetting it on a plane state (medium 5.5)
- [CVE-2023-52647](https://insights.sbomify.com/CVE-2023-52647/): media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access (medium 5.5)
- [CVE-2023-52646](https://insights.sbomify.com/CVE-2023-52646/): aio: fix mremap after fork null-deref (medium 5.5)
- [CVE-2023-52645](https://insights.sbomify.com/CVE-2023-52645/): pmdomain: mediatek: fix race conditions with genpd (medium 4.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/158/