# Vulnerabilities published in 2023


- [GSD-2023-1002387](https://insights.sbomify.com/GSD-2023-1002387/): net: USB: Fix wrong-direction WARNING in plusb.c (not scored)
- [GSD-2023-1002386](https://insights.sbomify.com/GSD-2023-1002386/): cifs: Fix use-after-free in rdata->read_into_pages() (not scored)
- [GSD-2023-1002385](https://insights.sbomify.com/GSD-2023-1002385/): Fix page corruption caused by racy check in __free_pages (not scored)
- [GSD-2023-1002384](https://insights.sbomify.com/GSD-2023-1002384/): ALSA: hda: Do not unset preset when cleaning up codec (not scored)
- [GSD-2023-1002383](https://insights.sbomify.com/GSD-2023-1002383/): net: sched: sch: Bounds check priority (not scored)
- [GSD-2023-1002382](https://insights.sbomify.com/GSD-2023-1002382/): s390/decompressor: specify __decompress() buf len to avoid overflow (not scored)
- [GSD-2023-1002381](https://insights.sbomify.com/GSD-2023-1002381/): aio: fix mremap after fork null-deref (not scored)
- [GSD-2023-1002380](https://insights.sbomify.com/GSD-2023-1002380/): mmc: sdio: fix possible resource leaks in some error paths (not scored)
- [GSD-2023-1002379](https://insights.sbomify.com/GSD-2023-1002379/): mmc: mmc_spi: fix error handling in mmc_spi_probe() (not scored)
- [GSD-2023-1002378](https://insights.sbomify.com/GSD-2023-1002378/): sched/psi: Fix use-after-free in ep_remove_wait_queue() (not scored)
- [GSD-2023-1002377](https://insights.sbomify.com/GSD-2023-1002377/): nilfs2: fix underflow in second superblock position calculations (not scored)
- [GSD-2023-1002376](https://insights.sbomify.com/GSD-2023-1002376/): net/sched: tcindex: update imperfect hash filters respecting rcu (not scored)
- [GSD-2023-1002375](https://insights.sbomify.com/GSD-2023-1002375/): net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (not scored)
- [GSD-2023-1002374](https://insights.sbomify.com/GSD-2023-1002374/): net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (not scored)
- [GSD-2023-1002373](https://insights.sbomify.com/GSD-2023-1002373/): net/sched: tcindex: search key must be 16 bits (not scored)
- [GSD-2023-1002372](https://insights.sbomify.com/GSD-2023-1002372/): net: sched: sch: Fix off by one in htb_activate_prios() (not scored)
- [GSD-2023-1002371](https://insights.sbomify.com/GSD-2023-1002371/): ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (not scored)
- [GSD-2023-1002370](https://insights.sbomify.com/GSD-2023-1002370/): IB/hfi1: Restore allocated resources on failed copyout (not scored)
- [GSD-2023-1002369](https://insights.sbomify.com/GSD-2023-1002369/): btrfs: zlib: zero-initialize zlib workspace (not scored)
- [GSD-2023-1002368](https://insights.sbomify.com/GSD-2023-1002368/): xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() (not scored)
- [GSD-2023-1002367](https://insights.sbomify.com/GSD-2023-1002367/): IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (not scored)
- [GSD-2023-1002366](https://insights.sbomify.com/GSD-2023-1002366/): RDMA/irdma: Fix potential NULL-ptr-dereference (not scored)
- [GSD-2023-1002365](https://insights.sbomify.com/GSD-2023-1002365/): ice: Do not use WQ_MEM_RECLAIM flag for workqueue (not scored)
- [GSD-2023-1002364](https://insights.sbomify.com/GSD-2023-1002364/): riscv: stacktrace: Fix missing the first frame (not scored)
- [GSD-2023-1002363](https://insights.sbomify.com/GSD-2023-1002363/): pinctrl: single: fix potential NULL dereference (not scored)
- [GSD-2023-1002362](https://insights.sbomify.com/GSD-2023-1002362/): net: USB: Fix wrong-direction WARNING in plusb.c (not scored)
- [GSD-2023-1002361](https://insights.sbomify.com/GSD-2023-1002361/): cifs: Fix use-after-free in rdata->read_into_pages() (not scored)
- [GSD-2023-1002360](https://insights.sbomify.com/GSD-2023-1002360/): powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (not scored)
- [GSD-2023-1002359](https://insights.sbomify.com/GSD-2023-1002359/): Fix page corruption caused by racy check in __free_pages (not scored)
- [GSD-2023-1002358](https://insights.sbomify.com/GSD-2023-1002358/): drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (not scored)
- [GSD-2023-1002357](https://insights.sbomify.com/GSD-2023-1002357/): ALSA: hda: Do not unset preset when cleaning up codec (not scored)
- [GSD-2023-1002356](https://insights.sbomify.com/GSD-2023-1002356/): bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (not scored)
- [GSD-2023-1002355](https://insights.sbomify.com/GSD-2023-1002355/): net: sched: sch: Bounds check priority (not scored)
- [GSD-2023-1002354](https://insights.sbomify.com/GSD-2023-1002354/): s390/decompressor: specify __decompress() buf len to avoid overflow (not scored)
- [GSD-2023-1002353](https://insights.sbomify.com/GSD-2023-1002353/): of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem (not scored)
- [GSD-2023-1002352](https://insights.sbomify.com/GSD-2023-1002352/): aio: fix mremap after fork null-deref (not scored)
- [GSD-2023-1002351](https://insights.sbomify.com/GSD-2023-1002351/): mmc: sdio: fix possible resource leaks in some error paths (not scored)
- [GSD-2023-1002350](https://insights.sbomify.com/GSD-2023-1002350/): mmc: mmc_spi: fix error handling in mmc_spi_probe() (not scored)
- [GSD-2023-1002349](https://insights.sbomify.com/GSD-2023-1002349/): sched/psi: Fix use-after-free in ep_remove_wait_queue() (not scored)
- [GSD-2023-1002348](https://insights.sbomify.com/GSD-2023-1002348/): net/sched: tcindex: update imperfect hash filters respecting rcu (not scored)
- [GSD-2023-1002347](https://insights.sbomify.com/GSD-2023-1002347/): nilfs2: fix underflow in second superblock position calculations (not scored)
- [GSD-2023-1002346](https://insights.sbomify.com/GSD-2023-1002346/): net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (not scored)
- [GSD-2023-1002345](https://insights.sbomify.com/GSD-2023-1002345/): net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (not scored)
- [GSD-2023-1002344](https://insights.sbomify.com/GSD-2023-1002344/): net/sched: tcindex: search key must be 16 bits (not scored)
- [GSD-2023-1002343](https://insights.sbomify.com/GSD-2023-1002343/): net: sched: sch: Fix off by one in htb_activate_prios() (not scored)
- [GSD-2023-1002342](https://insights.sbomify.com/GSD-2023-1002342/): ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (not scored)
- [GSD-2023-1002341](https://insights.sbomify.com/GSD-2023-1002341/): IB/hfi1: Restore allocated resources on failed copyout (not scored)
- [GSD-2023-1002340](https://insights.sbomify.com/GSD-2023-1002340/): btrfs: zlib: zero-initialize zlib workspace (not scored)
- [GSD-2023-1002339](https://insights.sbomify.com/GSD-2023-1002339/): xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() (not scored)
- [GSD-2023-1002338](https://insights.sbomify.com/GSD-2023-1002338/): IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (not scored)
- [GSD-2023-1002337](https://insights.sbomify.com/GSD-2023-1002337/): RDMA/irdma: Fix potential NULL-ptr-dereference (not scored)
- [GSD-2023-1002336](https://insights.sbomify.com/GSD-2023-1002336/): of: Make OF framebuffer device names unique (not scored)
- [GSD-2023-1002335](https://insights.sbomify.com/GSD-2023-1002335/): ice: Do not use WQ_MEM_RECLAIM flag for workqueue (not scored)
- [GSD-2023-1002334](https://insights.sbomify.com/GSD-2023-1002334/): ice: switch: fix potential memleak in ice_add_adv_recipe() (not scored)
- [GSD-2023-1002333](https://insights.sbomify.com/GSD-2023-1002333/): riscv: stacktrace: Fix missing the first frame (not scored)
- [GSD-2023-1002332](https://insights.sbomify.com/GSD-2023-1002332/): pinctrl: single: fix potential NULL dereference (not scored)
- [GSD-2023-1002331](https://insights.sbomify.com/GSD-2023-1002331/): net: USB: Fix wrong-direction WARNING in plusb.c (not scored)
- [GSD-2023-1002330](https://insights.sbomify.com/GSD-2023-1002330/): cxl/region: Fix null pointer dereference for resetting decoder (not scored)
- [GSD-2023-1002329](https://insights.sbomify.com/GSD-2023-1002329/): cifs: Fix use-after-free in rdata->read_into_pages() (not scored)
- [GSD-2023-1002328](https://insights.sbomify.com/GSD-2023-1002328/): powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (not scored)
- [GSD-2023-1002327](https://insights.sbomify.com/GSD-2023-1002327/): Fix page corruption caused by racy check in __free_pages (not scored)
- [GSD-2023-1002326](https://insights.sbomify.com/GSD-2023-1002326/): drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (not scored)
- [GSD-2023-1002325](https://insights.sbomify.com/GSD-2023-1002325/): btrfs: lock the inode in shared mode before starting fiemap (not scored)
- [GSD-2023-1002324](https://insights.sbomify.com/GSD-2023-1002324/): ALSA: hda: Do not unset preset when cleaning up codec (not scored)
- [GSD-2023-1002323](https://insights.sbomify.com/GSD-2023-1002323/): bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (not scored)
- [GSD-2023-1002322](https://insights.sbomify.com/GSD-2023-1002322/): vdpa: ifcvf: Do proper cleanup if IFCVF init fails (not scored)
- [GSD-2023-1002321](https://insights.sbomify.com/GSD-2023-1002321/): net: ethernet: mtk_eth_soc: Avoid truncating allocation (not scored)
- [GSD-2023-1002320](https://insights.sbomify.com/GSD-2023-1002320/): net: sched: sch: Bounds check priority (not scored)
- [GSD-2023-1002319](https://insights.sbomify.com/GSD-2023-1002319/): s390/decompressor: specify __decompress() buf len to avoid overflow (not scored)
- [GSD-2023-1002318](https://insights.sbomify.com/GSD-2023-1002318/): drm/amd/display: Adjust downscaling limits for dcn314 (not scored)
- [GSD-2023-1002317](https://insights.sbomify.com/GSD-2023-1002317/): ceph: blocklist the kclient when receiving corrupted snap trace (not scored)
- [GSD-2023-1002316](https://insights.sbomify.com/GSD-2023-1002316/): of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem (not scored)
- [GSD-2023-1002315](https://insights.sbomify.com/GSD-2023-1002315/): kasan: fix Oops due to missing calls to kasan_arch_is_ready() (not scored)
- [GSD-2023-1002314](https://insights.sbomify.com/GSD-2023-1002314/): aio: fix mremap after fork null-deref (not scored)
- [GSD-2023-1002313](https://insights.sbomify.com/GSD-2023-1002313/): fbdev: Fix invalid page access after closing deferred I/O devices (not scored)
- [GSD-2023-1002312](https://insights.sbomify.com/GSD-2023-1002312/): mmc: sdio: fix possible resource leaks in some error paths (not scored)
- [GSD-2023-1002311](https://insights.sbomify.com/GSD-2023-1002311/): mmc: mmc_spi: fix error handling in mmc_spi_probe() (not scored)
- [GSD-2023-1002310](https://insights.sbomify.com/GSD-2023-1002310/): sched/psi: Fix use-after-free in ep_remove_wait_queue() (not scored)
- [GSD-2023-1002309](https://insights.sbomify.com/GSD-2023-1002309/): gpio: sim: fix a memory leak (not scored)
- [GSD-2023-1002308](https://insights.sbomify.com/GSD-2023-1002308/): nilfs2: fix underflow in second superblock position calculations (not scored)
- [GSD-2023-1002307](https://insights.sbomify.com/GSD-2023-1002307/): freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL (not scored)
- [GSD-2023-1002306](https://insights.sbomify.com/GSD-2023-1002306/): net/sched: tcindex: update imperfect hash filters respecting rcu (not scored)
- [GSD-2023-1002305](https://insights.sbomify.com/GSD-2023-1002305/): net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (not scored)
- [GSD-2023-1002304](https://insights.sbomify.com/GSD-2023-1002304/): net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (not scored)
- [GSD-2023-1002303](https://insights.sbomify.com/GSD-2023-1002303/): net: use a bounce buffer for copying skb->mark (not scored)
- [GSD-2023-1002302](https://insights.sbomify.com/GSD-2023-1002302/): tipc: fix kernel warning when sending SYN message (not scored)
- [GSD-2023-1002301](https://insights.sbomify.com/GSD-2023-1002301/): net/sched: tcindex: search key must be 16 bits (not scored)
- [GSD-2023-1002300](https://insights.sbomify.com/GSD-2023-1002300/): net: sched: sch: Fix off by one in htb_activate_prios() (not scored)
- [GSD-2023-1002299](https://insights.sbomify.com/GSD-2023-1002299/): ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (not scored)
- [GSD-2023-1002298](https://insights.sbomify.com/GSD-2023-1002298/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1002297](https://insights.sbomify.com/GSD-2023-1002297/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1002296](https://insights.sbomify.com/GSD-2023-1002296/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1002295](https://insights.sbomify.com/GSD-2023-1002295/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1002294](https://insights.sbomify.com/GSD-2023-1002294/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1002293](https://insights.sbomify.com/GSD-2023-1002293/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1002292](https://insights.sbomify.com/GSD-2023-1002292/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1002291](https://insights.sbomify.com/GSD-2023-1002291/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1002290](https://insights.sbomify.com/GSD-2023-1002290/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1002289](https://insights.sbomify.com/GSD-2023-1002289/): HID: intel_ish-hid: Add check for ishtp_dma_tx_map (not scored)
- [GSD-2023-1002288](https://insights.sbomify.com/GSD-2023-1002288/): EDAC/highbank: Fix memory leak in highbank_mc_probe() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/97/