# Vulnerabilities published in 2023


- [CVE-2023-52644](https://insights.sbomify.com/CVE-2023-52644/): wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (medium 6.3)
- [CVE-2023-52643](https://insights.sbomify.com/CVE-2023-52643/): iio: core: fix memleak in iio_device_register_sysfs (medium 5.5)
- [CVE-2023-52642](https://insights.sbomify.com/CVE-2023-52642/): media: rc: bpf attach/detach requires write permission (high 7.8)
- [CVE-2023-52641](https://insights.sbomify.com/CVE-2023-52641/): fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() (medium 5.5)
- [CVE-2023-52640](https://insights.sbomify.com/CVE-2023-52640/): fs/ntfs3: Fix oob in ntfs_listxattr (high 7.1)
- [CVE-2023-5264](https://insights.sbomify.com/CVE-2023-5264/): huakecms cms_content.php sql injection (medium 6.3)
- [CVE-2023-52639](https://insights.sbomify.com/CVE-2023-52639/): KVM: s390: vsie: fix race during shadow creation (medium 4.7)
- [CVE-2023-52638](https://insights.sbomify.com/CVE-2023-52638/): can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (medium 5.5)
- [CVE-2023-52637](https://insights.sbomify.com/CVE-2023-52637/): can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (high 7.8)
- [CVE-2023-52636](https://insights.sbomify.com/CVE-2023-52636/): libceph: just wait for more data to be available on the socket (high 8.2)
- [CVE-2023-52635](https://insights.sbomify.com/CVE-2023-52635/): PM / devfreq: Synchronize devfreq_monitor_[start/stop] (medium 5.5)
- [CVE-2023-52634](https://insights.sbomify.com/CVE-2023-52634/): drm/amd/display: Fix disable_otg_wa logic (medium 5.5)
- [CVE-2023-52633](https://insights.sbomify.com/CVE-2023-52633/): um: time-travel: fix time corruption (medium 5.0)
- [CVE-2023-52632](https://insights.sbomify.com/CVE-2023-52632/): drm/amdkfd: Fix lock dependency warning with srcu (medium 5.5)
- [CVE-2023-52631](https://insights.sbomify.com/CVE-2023-52631/): fs/ntfs3: Fix an NULL dereference bug (medium 5.5)
- [CVE-2023-5263](https://insights.sbomify.com/CVE-2023-5263/): ZZZCMS Database Backup File save.php restore permission (medium 6.3)
- [CVE-2023-52629](https://insights.sbomify.com/CVE-2023-52629/): sh: push-switch: Reorder cleanup operations to avoid use-after-free bug (high 8.4)
- [CVE-2023-52628](https://insights.sbomify.com/CVE-2023-52628/): netfilter: nftables: exthdr: fix 4-byte stack OOB write (high 7.8)
- [CVE-2023-52627](https://insights.sbomify.com/CVE-2023-52627/): iio: adc: ad7091r: Allow users to configure device events (medium 5.5)
- [CVE-2023-52626](https://insights.sbomify.com/CVE-2023-52626/): net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (high 7.1)
- [CVE-2023-52625](https://insights.sbomify.com/CVE-2023-52625/): drm/amd/display: Refactor DMCUB enter/exit idle interface (medium 5.5)
- [CVE-2023-52624](https://insights.sbomify.com/CVE-2023-52624/): drm/amd/display: Wake DMCUB before executing GPINT commands (high 7.8)
- [CVE-2023-52623](https://insights.sbomify.com/CVE-2023-52623/): SUNRPC: Fix a suspicious RCU usage warning (high 7.8)
- [CVE-2023-52622](https://insights.sbomify.com/CVE-2023-52622/): ext4: avoid online resizing failures due to oversized flex bg (medium 5.5)
- [CVE-2023-52621](https://insights.sbomify.com/CVE-2023-52621/): bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (high 7.8)
- [CVE-2023-52620](https://insights.sbomify.com/CVE-2023-52620/): netfilter: nf_tables: disallow timeout for anonymous sets (high 7.8)
- [CVE-2023-5262](https://insights.sbomify.com/CVE-2023-5262/): OpenRapid RapidCMS uploadicon.php isImg unrestricted upload (medium 6.3)
- [CVE-2023-52619](https://insights.sbomify.com/CVE-2023-52619/): pstore/ram: Fix crash when setting number of cpus to an odd number (medium 5.5)
- [CVE-2023-52618](https://insights.sbomify.com/CVE-2023-52618/): block/rnbd-srv: Check for unlikely string overflow (medium 5.3)
- [CVE-2023-52617](https://insights.sbomify.com/CVE-2023-52617/): PCI: switchtec: Fix stdev_release() crash after surprise hot remove (medium 4.4)
- [CVE-2023-52616](https://insights.sbomify.com/CVE-2023-52616/): crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (high 7.8)
- [CVE-2023-52615](https://insights.sbomify.com/CVE-2023-52615/): hwrng: core - Fix page fault dead lock on mmap-ed hwrng (medium 5.5)
- [CVE-2023-52614](https://insights.sbomify.com/CVE-2023-52614/): PM / devfreq: Fix buffer overflow in trans_stat_show (high 7.8)
- [CVE-2023-52613](https://insights.sbomify.com/CVE-2023-52613/): drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment (medium 5.5)
- [CVE-2023-52612](https://insights.sbomify.com/CVE-2023-52612/): crypto: scomp - fix req->dst buffer overflow (high 7.8)
- [CVE-2023-52611](https://insights.sbomify.com/CVE-2023-52611/): wifi: rtw88: sdio: Honor the host max_req_size in the RX path (medium 5.5)
- [CVE-2023-52610](https://insights.sbomify.com/CVE-2023-52610/): net/sched: act_ct: fix skb leak and crash on ooo frags (high 7.5)
- [CVE-2023-5261](https://insights.sbomify.com/CVE-2023-5261/): Tongda OA 2017 delete.php sql injection (medium 5.5)
- [CVE-2023-52609](https://insights.sbomify.com/CVE-2023-52609/): binder: fix race between mmput() and do_exit() (medium 4.7)
- [CVE-2023-52608](https://insights.sbomify.com/CVE-2023-52608/): firmware: arm_scmi: Check mailbox/SMT channel for consistency (medium 4.7)
- [CVE-2023-52607](https://insights.sbomify.com/CVE-2023-52607/): powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (medium 5.5)
- [CVE-2023-52606](https://insights.sbomify.com/CVE-2023-52606/): powerpc/lib: Validate size for vector operations (high 7.8)
- [CVE-2023-52604](https://insights.sbomify.com/CVE-2023-52604/): FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (high 7.8)
- [CVE-2023-52603](https://insights.sbomify.com/CVE-2023-52603/): UBSAN: array-index-out-of-bounds in dtSplitRoot (high 7.8)
- [CVE-2023-52602](https://insights.sbomify.com/CVE-2023-52602/): jfs: fix slab-out-of-bounds Read in dtSearch (high 7.8)
- [CVE-2023-52601](https://insights.sbomify.com/CVE-2023-52601/): jfs: fix array-index-out-of-bounds in dbAdjTree (high 7.8)
- [CVE-2023-52600](https://insights.sbomify.com/CVE-2023-52600/): jfs: fix uaf in jfs_evict_inode (high 7.8)
- [CVE-2023-5260](https://insights.sbomify.com/CVE-2023-5260/): SourceCodester Simple Membership System group_validator.php sql injection (medium 6.3)
- [CVE-2023-52599](https://insights.sbomify.com/CVE-2023-52599/): jfs: fix array-index-out-of-bounds in diNewExt (high 7.8)
- [CVE-2023-52598](https://insights.sbomify.com/CVE-2023-52598/): s390/ptrace: handle setting of fpc register correctly (high 7.1)
- [CVE-2023-52597](https://insights.sbomify.com/CVE-2023-52597/): KVM: s390: fix setting of fpc register (medium 4.0)
- [CVE-2023-52596](https://insights.sbomify.com/CVE-2023-52596/): sysctl: Fix out of bounds access for empty sysctl registers (medium 5.5)
- [CVE-2023-52595](https://insights.sbomify.com/CVE-2023-52595/): wifi: rt2x00: restart beacon queue when hardware reset (medium 5.5)
- [CVE-2023-52594](https://insights.sbomify.com/CVE-2023-52594/): wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (high 7.8)
- [CVE-2023-52593](https://insights.sbomify.com/CVE-2023-52593/): wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() (medium 5.5)
- [CVE-2023-52591](https://insights.sbomify.com/CVE-2023-52591/): reiserfs: Avoid touching renamed directory if parent does not change (high 7.8)
- [CVE-2023-52590](https://insights.sbomify.com/CVE-2023-52590/): ocfs2: Avoid touching renamed directory if parent does not change (high 7.8)
- [CVE-2023-5259](https://insights.sbomify.com/CVE-2023-5259/): ForU CMS cms_admin.php denial of service (low 2.7)
- [CVE-2023-52589](https://insights.sbomify.com/CVE-2023-52589/): media: rkisp1: Fix IRQ disable race issue (medium 4.7)
- [CVE-2023-52588](https://insights.sbomify.com/CVE-2023-52588/): f2fs: fix to tag gcing flag on page during block migration (high 7.3)
- [CVE-2023-52587](https://insights.sbomify.com/CVE-2023-52587/): IB/ipoib: Fix mcast list locking (medium 5.5)
- [CVE-2023-52586](https://insights.sbomify.com/CVE-2023-52586/): drm/msm/dpu: Add mutex lock in control vblank irq (high 7.8)
- [CVE-2023-52585](https://insights.sbomify.com/CVE-2023-52585/): drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (medium 5.5)
- [CVE-2023-52584](https://insights.sbomify.com/CVE-2023-52584/): spmi: mediatek: Fix UAF on device remove (low 3.8)
- [CVE-2023-52583](https://insights.sbomify.com/CVE-2023-52583/): ceph: fix deadlock or deadcode of misusing dget() (medium 5.5)
- [CVE-2023-52582](https://insights.sbomify.com/CVE-2023-52582/): netfs: Only call folio_start_fscache() one time for each folio (medium 5.5)
- [CVE-2023-52581](https://insights.sbomify.com/CVE-2023-52581/): netfilter: nf_tables: fix memleak when more than 255 elements expired (medium 6.3)
- [CVE-2023-52580](https://insights.sbomify.com/CVE-2023-52580/): net/core: Fix ETH_P_1588 flow dissector (medium 5.5)
- [CVE-2023-5258](https://insights.sbomify.com/CVE-2023-5258/): OpenRapid RapidCMS addgood.php sql injection (medium 6.3)
- [CVE-2023-52578](https://insights.sbomify.com/CVE-2023-52578/): net: bridge: use DEV_STATS_INC() (high 7.0)
- [CVE-2023-52577](https://insights.sbomify.com/CVE-2023-52577/): dccp: fix dccp_v4_err()/dccp_v6_err() again (medium 5.5)
- [CVE-2023-52576](https://insights.sbomify.com/CVE-2023-52576/): x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() (medium 5.5)
- [CVE-2023-52574](https://insights.sbomify.com/CVE-2023-52574/): team: fix null-ptr-deref when team device type is changed (high 7.8)
- [CVE-2023-52573](https://insights.sbomify.com/CVE-2023-52573/): net: rds: Fix possible NULL-pointer dereference (medium 5.5)
- [CVE-2023-52572](https://insights.sbomify.com/CVE-2023-52572/): cifs: Fix UAF in cifs_demultiplex_thread() (high 7.8)
- [CVE-2023-52571](https://insights.sbomify.com/CVE-2023-52571/): power: supply: rk817: Fix node refcount leak (high 7.1)
- [CVE-2023-52570](https://insights.sbomify.com/CVE-2023-52570/): vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() (medium 5.5)
- [CVE-2023-5257](https://insights.sbomify.com/CVE-2023-5257/): WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal (low 3.5)
- [CVE-2023-52569](https://insights.sbomify.com/CVE-2023-52569/): btrfs: remove BUG() after failure to insert delayed dir index item (medium 5.5)
- [CVE-2023-52568](https://insights.sbomify.com/CVE-2023-52568/): x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race (medium 4.7)
- [CVE-2023-52567](https://insights.sbomify.com/CVE-2023-52567/): serial: 8250_port: Check IRQ data before use (medium 5.5)
- [CVE-2023-52566](https://insights.sbomify.com/CVE-2023-52566/): nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (medium 5.5)
- [CVE-2023-52565](https://insights.sbomify.com/CVE-2023-52565/): media: uvcvideo: Fix OOB read (high 7.1)
- [CVE-2023-52564](https://insights.sbomify.com/CVE-2023-52564/): Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" (medium 5.5)
- [CVE-2023-52563](https://insights.sbomify.com/CVE-2023-52563/): drm/meson: fix memory leak on ->hpd_notify callback (medium 5.5)
- [CVE-2023-52562](https://insights.sbomify.com/CVE-2023-52562/): mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (medium 5.5)
- [CVE-2023-52561](https://insights.sbomify.com/CVE-2023-52561/): arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved (medium 5.5)
- [CVE-2023-52560](https://insights.sbomify.com/CVE-2023-52560/): mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (medium 5.5)
- [CVE-2023-5256](https://insights.sbomify.com/CVE-2023-5256/): Drupal core - Critical - Cache poisoning - SA-CORE-2023-006 (high 7.5)
- [CVE-2023-52559](https://insights.sbomify.com/CVE-2023-52559/): iommu/vt-d: Avoid memory allocation in iommu_suspend() (medium 5.5)
- [CVE-2023-52558](https://insights.sbomify.com/CVE-2023-52558/): OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash (high 7.5)
- [CVE-2023-52557](https://insights.sbomify.com/CVE-2023-52557/): OpenBSD 7.3 invalid l2tp message npppd crash (high 7.5)
- [CVE-2023-52556](https://insights.sbomify.com/CVE-2023-52556/): OpenBSD 7.4 pf state race condition kernel crash (medium 6.2)
- [CVE-2023-52555](https://insights.sbomify.com/CVE-2023-52555/): mongo-express Cross-site Request Forgery vulnerability (medium 6.1)
- [CVE-2023-52554](https://insights.sbomify.com/CVE-2023-52554/): Missing authorization in EMUI (medium 6.5)
- [CVE-2023-52553](https://insights.sbomify.com/CVE-2023-52553/): Race condition in EMUI (high 7.4)
- [CVE-2023-52552](https://insights.sbomify.com/CVE-2023-52552/): Other in EMUI (high 7.5)
- [CVE-2023-52551](https://insights.sbomify.com/CVE-2023-52551/): Memory corruption in EMUI (medium 5.3)
- [CVE-2023-52550](https://insights.sbomify.com/CVE-2023-52550/): Memory corruption in EMUI (high 7.5)
- [CVE-2023-5255](https://insights.sbomify.com/CVE-2023-5255/): Denial of Service for Revocation of Auto Renewed Certificates (medium 4.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/159/