# Vulnerabilities published in 2023


- [GSD-2023-1002287](https://insights.sbomify.com/GSD-2023-1002287/): net: nfc: Fix use-after-free in local_cleanup() (not scored)
- [GSD-2023-1002286](https://insights.sbomify.com/GSD-2023-1002286/): wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (not scored)
- [GSD-2023-1002285](https://insights.sbomify.com/GSD-2023-1002285/): net: mdio: validate parameter addr in mdiobus_get_phy() (not scored)
- [GSD-2023-1002284](https://insights.sbomify.com/GSD-2023-1002284/): usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (not scored)
- [GSD-2023-1002283](https://insights.sbomify.com/GSD-2023-1002283/): net: mlx5: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2023-1002282](https://insights.sbomify.com/GSD-2023-1002282/): dmaengine: Fix double increment of client_count in dma_chan_get() (not scored)
- [GSD-2023-1002281](https://insights.sbomify.com/GSD-2023-1002281/): HID: betop: check shape of output reports (not scored)
- [GSD-2023-1002280](https://insights.sbomify.com/GSD-2023-1002280/): w1: fix WARNING after calling w1_process() (not scored)
- [GSD-2023-1002279](https://insights.sbomify.com/GSD-2023-1002279/): tracing: Make sure trace_printk() can output as soon as it can be used (not scored)
- [GSD-2023-1002278](https://insights.sbomify.com/GSD-2023-1002278/): netrom: Fix use-after-free of a listening socket. (not scored)
- [GSD-2023-1002277](https://insights.sbomify.com/GSD-2023-1002277/): x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (not scored)
- [GSD-2023-1002276](https://insights.sbomify.com/GSD-2023-1002276/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1002275](https://insights.sbomify.com/GSD-2023-1002275/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1002274](https://insights.sbomify.com/GSD-2023-1002274/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1002273](https://insights.sbomify.com/GSD-2023-1002273/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1002272](https://insights.sbomify.com/GSD-2023-1002272/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1002271](https://insights.sbomify.com/GSD-2023-1002271/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1002270](https://insights.sbomify.com/GSD-2023-1002270/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1002269](https://insights.sbomify.com/GSD-2023-1002269/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1002268](https://insights.sbomify.com/GSD-2023-1002268/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1002267](https://insights.sbomify.com/GSD-2023-1002267/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1002266](https://insights.sbomify.com/GSD-2023-1002266/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1002265](https://insights.sbomify.com/GSD-2023-1002265/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1002264](https://insights.sbomify.com/GSD-2023-1002264/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1002263](https://insights.sbomify.com/GSD-2023-1002263/): HID: intel_ish-hid: Add check for ishtp_dma_tx_map (not scored)
- [GSD-2023-1002262](https://insights.sbomify.com/GSD-2023-1002262/): EDAC/highbank: Fix memory leak in highbank_mc_probe() (not scored)
- [GSD-2023-1002261](https://insights.sbomify.com/GSD-2023-1002261/): bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (not scored)
- [GSD-2023-1002260](https://insights.sbomify.com/GSD-2023-1002260/): net: nfc: Fix use-after-free in local_cleanup() (not scored)
- [GSD-2023-1002259](https://insights.sbomify.com/GSD-2023-1002259/): wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (not scored)
- [GSD-2023-1002258](https://insights.sbomify.com/GSD-2023-1002258/): net: mdio: validate parameter addr in mdiobus_get_phy() (not scored)
- [GSD-2023-1002257](https://insights.sbomify.com/GSD-2023-1002257/): usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (not scored)
- [GSD-2023-1002256](https://insights.sbomify.com/GSD-2023-1002256/): net: mlx5: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2023-1002255](https://insights.sbomify.com/GSD-2023-1002255/): dmaengine: Fix double increment of client_count in dma_chan_get() (not scored)
- [GSD-2023-1002254](https://insights.sbomify.com/GSD-2023-1002254/): HID: betop: check shape of output reports (not scored)
- [GSD-2023-1002253](https://insights.sbomify.com/GSD-2023-1002253/): w1: fix WARNING after calling w1_process() (not scored)
- [GSD-2023-1002252](https://insights.sbomify.com/GSD-2023-1002252/): tracing: Make sure trace_printk() can output as soon as it can be used (not scored)
- [GSD-2023-1002251](https://insights.sbomify.com/GSD-2023-1002251/): trace_events_hist: add check for return value of 'create_hist_field' (not scored)
- [GSD-2023-1002250](https://insights.sbomify.com/GSD-2023-1002250/): cifs: Fix oops due to uncleared server->smbd_conn in reconnect (not scored)
- [GSD-2023-1002249](https://insights.sbomify.com/GSD-2023-1002249/): net: fix UaF in netns ops registration error path (not scored)
- [GSD-2023-1002248](https://insights.sbomify.com/GSD-2023-1002248/): ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (not scored)
- [GSD-2023-1002247](https://insights.sbomify.com/GSD-2023-1002247/): netrom: Fix use-after-free of a listening socket. (not scored)
- [GSD-2023-1002246](https://insights.sbomify.com/GSD-2023-1002246/): x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (not scored)
- [GSD-2023-1002245](https://insights.sbomify.com/GSD-2023-1002245/): dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (not scored)
- [GSD-2023-1002244](https://insights.sbomify.com/GSD-2023-1002244/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1002243](https://insights.sbomify.com/GSD-2023-1002243/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1002242](https://insights.sbomify.com/GSD-2023-1002242/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1002241](https://insights.sbomify.com/GSD-2023-1002241/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1002240](https://insights.sbomify.com/GSD-2023-1002240/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1002239](https://insights.sbomify.com/GSD-2023-1002239/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)
- [GSD-2023-1002238](https://insights.sbomify.com/GSD-2023-1002238/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1002237](https://insights.sbomify.com/GSD-2023-1002237/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1002236](https://insights.sbomify.com/GSD-2023-1002236/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1002235](https://insights.sbomify.com/GSD-2023-1002235/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1002234](https://insights.sbomify.com/GSD-2023-1002234/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1002233](https://insights.sbomify.com/GSD-2023-1002233/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1002232](https://insights.sbomify.com/GSD-2023-1002232/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1002231](https://insights.sbomify.com/GSD-2023-1002231/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1002230](https://insights.sbomify.com/GSD-2023-1002230/): misc: fastrpc: Don't remove map on creater_process and device_release (not scored)
- [GSD-2023-1002229](https://insights.sbomify.com/GSD-2023-1002229/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1002228](https://insights.sbomify.com/GSD-2023-1002228/): misc: fastrpc: Fix use-after-free race condition for maps (not scored)
- [GSD-2023-1002227](https://insights.sbomify.com/GSD-2023-1002227/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (not scored)
- [GSD-2023-1002226](https://insights.sbomify.com/GSD-2023-1002226/): USB: gadgetfs: Fix race between mounting and unmounting (not scored)
- [GSD-2023-1002225](https://insights.sbomify.com/GSD-2023-1002225/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1002224](https://insights.sbomify.com/GSD-2023-1002224/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1002223](https://insights.sbomify.com/GSD-2023-1002223/): HID: intel_ish-hid: Add check for ishtp_dma_tx_map (not scored)
- [GSD-2023-1002222](https://insights.sbomify.com/GSD-2023-1002222/): EDAC/highbank: Fix memory leak in highbank_mc_probe() (not scored)
- [GSD-2023-1002221](https://insights.sbomify.com/GSD-2023-1002221/): RDMA/core: Fix ib block iterator counter overflow (not scored)
- [GSD-2023-1002220](https://insights.sbomify.com/GSD-2023-1002220/): bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (not scored)
- [GSD-2023-1002219](https://insights.sbomify.com/GSD-2023-1002219/): net: nfc: Fix use-after-free in local_cleanup() (not scored)
- [GSD-2023-1002218](https://insights.sbomify.com/GSD-2023-1002218/): wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (not scored)
- [GSD-2023-1002217](https://insights.sbomify.com/GSD-2023-1002217/): net/sched: sch_taprio: fix possible use-after-free (not scored)
- [GSD-2023-1002216](https://insights.sbomify.com/GSD-2023-1002216/): net: mdio: validate parameter addr in mdiobus_get_phy() (not scored)
- [GSD-2023-1002215](https://insights.sbomify.com/GSD-2023-1002215/): usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (not scored)
- [GSD-2023-1002214](https://insights.sbomify.com/GSD-2023-1002214/): net: mlx5: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2023-1002213](https://insights.sbomify.com/GSD-2023-1002213/): dmaengine: Fix double increment of client_count in dma_chan_get() (not scored)
- [GSD-2023-1002212](https://insights.sbomify.com/GSD-2023-1002212/): HID: betop: check shape of output reports (not scored)
- [GSD-2023-1002211](https://insights.sbomify.com/GSD-2023-1002211/): w1: fix WARNING after calling w1_process() (not scored)
- [GSD-2023-1002210](https://insights.sbomify.com/GSD-2023-1002210/): tracing: Make sure trace_printk() can output as soon as it can be used (not scored)
- [GSD-2023-1002209](https://insights.sbomify.com/GSD-2023-1002209/): trace_events_hist: add check for return value of 'create_hist_field' (not scored)
- [GSD-2023-1002208](https://insights.sbomify.com/GSD-2023-1002208/): cifs: Fix oops due to uncleared server->smbd_conn in reconnect (not scored)
- [GSD-2023-1002207](https://insights.sbomify.com/GSD-2023-1002207/): EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (not scored)
- [GSD-2023-1002206](https://insights.sbomify.com/GSD-2023-1002206/): netlink: prevent potential spectre v1 gadgets (not scored)
- [GSD-2023-1002205](https://insights.sbomify.com/GSD-2023-1002205/): net: fix UaF in netns ops registration error path (not scored)
- [GSD-2023-1002204](https://insights.sbomify.com/GSD-2023-1002204/): ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (not scored)
- [GSD-2023-1002203](https://insights.sbomify.com/GSD-2023-1002203/): ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (not scored)
- [GSD-2023-1002202](https://insights.sbomify.com/GSD-2023-1002202/): netrom: Fix use-after-free of a listening socket. (not scored)
- [GSD-2023-1002201](https://insights.sbomify.com/GSD-2023-1002201/): net/sched: sch_taprio: do not schedule in taprio_reset() (not scored)
- [GSD-2023-1002200](https://insights.sbomify.com/GSD-2023-1002200/): x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (not scored)
- [GSD-2023-1002199](https://insights.sbomify.com/GSD-2023-1002199/): perf/x86/amd: fix potential integer overflow on shift of a int (not scored)
- [GSD-2023-1002198](https://insights.sbomify.com/GSD-2023-1002198/): bpf: Skip task with pid=1 in send_signal_common() (not scored)
- [GSD-2023-1002197](https://insights.sbomify.com/GSD-2023-1002197/): dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (not scored)
- [GSD-2023-1002196](https://insights.sbomify.com/GSD-2023-1002196/): netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (not scored)
- [GSD-2023-1002195](https://insights.sbomify.com/GSD-2023-1002195/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1002194](https://insights.sbomify.com/GSD-2023-1002194/): s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (not scored)
- [GSD-2023-1002193](https://insights.sbomify.com/GSD-2023-1002193/): drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (not scored)
- [GSD-2023-1002192](https://insights.sbomify.com/GSD-2023-1002192/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1002191](https://insights.sbomify.com/GSD-2023-1002191/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1002190](https://insights.sbomify.com/GSD-2023-1002190/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1002189](https://insights.sbomify.com/GSD-2023-1002189/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1002188](https://insights.sbomify.com/GSD-2023-1002188/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/98/