# Vulnerabilities published in 2023


- [GSD-2023-1002187](https://insights.sbomify.com/GSD-2023-1002187/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1002186](https://insights.sbomify.com/GSD-2023-1002186/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1002185](https://insights.sbomify.com/GSD-2023-1002185/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1002184](https://insights.sbomify.com/GSD-2023-1002184/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1002183](https://insights.sbomify.com/GSD-2023-1002183/): io_uring/io-wq: only free worker if it was allocated for creation (not scored)
- [GSD-2023-1002182](https://insights.sbomify.com/GSD-2023-1002182/): io_uring: lock overflowing for IOPOLL (not scored)
- [GSD-2023-1002181](https://insights.sbomify.com/GSD-2023-1002181/): Bluetooth: hci_qca: Fix driver shutdown on closed serdev (not scored)
- [GSD-2023-1002180](https://insights.sbomify.com/GSD-2023-1002180/): btrfs: always report error in run_one_delayed_ref() (not scored)
- [GSD-2023-1002179](https://insights.sbomify.com/GSD-2023-1002179/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1002178](https://insights.sbomify.com/GSD-2023-1002178/): wifi: mac80211: sdata can be NULL during AMPDU start (not scored)
- [GSD-2023-1002177](https://insights.sbomify.com/GSD-2023-1002177/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1002176](https://insights.sbomify.com/GSD-2023-1002176/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1002175](https://insights.sbomify.com/GSD-2023-1002175/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1002174](https://insights.sbomify.com/GSD-2023-1002174/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1002173](https://insights.sbomify.com/GSD-2023-1002173/): misc: fastrpc: Don't remove map on creater_process and device_release (not scored)
- [GSD-2023-1002172](https://insights.sbomify.com/GSD-2023-1002172/): misc: fastrpc: Fix use-after-free race condition for maps (not scored)
- [GSD-2023-1002171](https://insights.sbomify.com/GSD-2023-1002171/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (not scored)
- [GSD-2023-1002170](https://insights.sbomify.com/GSD-2023-1002170/): tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (not scored)
- [GSD-2023-1002169](https://insights.sbomify.com/GSD-2023-1002169/): USB: gadgetfs: Fix race between mounting and unmounting (not scored)
- [GSD-2023-1002168](https://insights.sbomify.com/GSD-2023-1002168/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1002167](https://insights.sbomify.com/GSD-2023-1002167/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1002166](https://insights.sbomify.com/GSD-2023-1002166/): drm/amd/display: Calculate output_color_space after pixel encoding adjustment (not scored)
- [GSD-2023-1002165](https://insights.sbomify.com/GSD-2023-1002165/): Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" (not scored)
- [GSD-2023-1002164](https://insights.sbomify.com/GSD-2023-1002164/): HID: intel_ish-hid: Add check for ishtp_dma_tx_map (not scored)
- [GSD-2023-1002163](https://insights.sbomify.com/GSD-2023-1002163/): EDAC/highbank: Fix memory leak in highbank_mc_probe() (not scored)
- [GSD-2023-1002162](https://insights.sbomify.com/GSD-2023-1002162/): RDMA/core: Fix ib block iterator counter overflow (not scored)
- [GSD-2023-1002161](https://insights.sbomify.com/GSD-2023-1002161/): IB/hfi1: Immediately remove invalid memory from hardware (not scored)
- [GSD-2023-1002160](https://insights.sbomify.com/GSD-2023-1002160/): bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (not scored)
- [GSD-2023-1002159](https://insights.sbomify.com/GSD-2023-1002159/): net: nfc: Fix use-after-free in local_cleanup() (not scored)
- [GSD-2023-1002158](https://insights.sbomify.com/GSD-2023-1002158/): wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (not scored)
- [GSD-2023-1002157](https://insights.sbomify.com/GSD-2023-1002157/): net/sched: sch_taprio: fix possible use-after-free (not scored)
- [GSD-2023-1002156](https://insights.sbomify.com/GSD-2023-1002156/): l2tp: close all race conditions in l2tp_tunnel_register() (not scored)
- [GSD-2023-1002155](https://insights.sbomify.com/GSD-2023-1002155/): net: mdio: validate parameter addr in mdiobus_get_phy() (not scored)
- [GSD-2023-1002154](https://insights.sbomify.com/GSD-2023-1002154/): usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (not scored)
- [GSD-2023-1002153](https://insights.sbomify.com/GSD-2023-1002153/): net: mlx5: eliminate anonymous module_init & module_exit (not scored)
- [GSD-2023-1002152](https://insights.sbomify.com/GSD-2023-1002152/): dmaengine: Fix double increment of client_count in dma_chan_get() (not scored)
- [GSD-2023-1002151](https://insights.sbomify.com/GSD-2023-1002151/): l2tp: prevent lockdep issue in l2tp_tunnel_register() (not scored)
- [GSD-2023-1002150](https://insights.sbomify.com/GSD-2023-1002150/): HID: betop: check shape of output reports (not scored)
- [GSD-2023-1002149](https://insights.sbomify.com/GSD-2023-1002149/): w1: fix WARNING after calling w1_process() (not scored)
- [GSD-2023-1002148](https://insights.sbomify.com/GSD-2023-1002148/): tracing: Make sure trace_printk() can output as soon as it can be used (not scored)
- [GSD-2023-1002147](https://insights.sbomify.com/GSD-2023-1002147/): trace_events_hist: add check for return value of 'create_hist_field' (not scored)
- [GSD-2023-1002146](https://insights.sbomify.com/GSD-2023-1002146/): cifs: Fix oops due to uncleared server->smbd_conn in reconnect (not scored)
- [GSD-2023-1002145](https://insights.sbomify.com/GSD-2023-1002145/): EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (not scored)
- [GSD-2023-1002144](https://insights.sbomify.com/GSD-2023-1002144/): i2c: designware: use casting of u64 in clock multiplication to avoid overflow (not scored)
- [GSD-2023-1002143](https://insights.sbomify.com/GSD-2023-1002143/): netlink: prevent potential spectre v1 gadgets (not scored)
- [GSD-2023-1002142](https://insights.sbomify.com/GSD-2023-1002142/): net: fix UaF in netns ops registration error path (not scored)
- [GSD-2023-1002141](https://insights.sbomify.com/GSD-2023-1002141/): ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (not scored)
- [GSD-2023-1002140](https://insights.sbomify.com/GSD-2023-1002140/): ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (not scored)
- [GSD-2023-1002139](https://insights.sbomify.com/GSD-2023-1002139/): netrom: Fix use-after-free of a listening socket. (not scored)
- [GSD-2023-1002138](https://insights.sbomify.com/GSD-2023-1002138/): net/sched: sch_taprio: do not schedule in taprio_reset() (not scored)
- [GSD-2023-1002137](https://insights.sbomify.com/GSD-2023-1002137/): x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (not scored)
- [GSD-2023-1002136](https://insights.sbomify.com/GSD-2023-1002136/): perf/x86/amd: fix potential integer overflow on shift of a int (not scored)
- [GSD-2023-1002135](https://insights.sbomify.com/GSD-2023-1002135/): net: fix NULL pointer in skb_segment_list (not scored)
- [GSD-2023-1002134](https://insights.sbomify.com/GSD-2023-1002134/): bpf: Skip task with pid=1 in send_signal_common() (not scored)
- [GSD-2023-1002133](https://insights.sbomify.com/GSD-2023-1002133/): dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (not scored)
- [GSD-2023-1002132](https://insights.sbomify.com/GSD-2023-1002132/): netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (not scored)
- [GSD-2023-1002131](https://insights.sbomify.com/GSD-2023-1002131/): drm/virtio: Fix GEM handle creation UAF (not scored)
- [GSD-2023-1002130](https://insights.sbomify.com/GSD-2023-1002130/): drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (not scored)
- [GSD-2023-1002129](https://insights.sbomify.com/GSD-2023-1002129/): s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (not scored)
- [GSD-2023-1002128](https://insights.sbomify.com/GSD-2023-1002128/): ixgbe: fix pci device refcount leak (not scored)
- [GSD-2023-1002127](https://insights.sbomify.com/GSD-2023-1002127/): ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (not scored)
- [GSD-2023-1002126](https://insights.sbomify.com/GSD-2023-1002126/): mm: Always release pages to the buddy allocator in memblock_free_late(). (not scored)
- [GSD-2023-1002125](https://insights.sbomify.com/GSD-2023-1002125/): iommu/iova: Fix alloc iova overflows issue (not scored)
- [GSD-2023-1002124](https://insights.sbomify.com/GSD-2023-1002124/): sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (not scored)
- [GSD-2023-1002123](https://insights.sbomify.com/GSD-2023-1002123/): netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (not scored)
- [GSD-2023-1002122](https://insights.sbomify.com/GSD-2023-1002122/): powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (not scored)
- [GSD-2023-1002121](https://insights.sbomify.com/GSD-2023-1002121/): nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (not scored)
- [GSD-2023-1002120](https://insights.sbomify.com/GSD-2023-1002120/): regulator: da9211: Use irq handler when ready (not scored)
- [GSD-2023-1002119](https://insights.sbomify.com/GSD-2023-1002119/): net/sched: act_mpls: Fix warning during failed attribute validation (not scored)
- [GSD-2023-1002118](https://insights.sbomify.com/GSD-2023-1002118/): platform/surface: aggregator: Add missing call to ssam_request_sync_free() (not scored)
- [GSD-2023-1002117](https://insights.sbomify.com/GSD-2023-1002117/): efi: fix NULL-deref in init error path (not scored)
- [GSD-2023-1002116](https://insights.sbomify.com/GSD-2023-1002116/): io_uring/io-wq: only free worker if it was allocated for creation (not scored)
- [GSD-2023-1002115](https://insights.sbomify.com/GSD-2023-1002115/): io_uring: lock overflowing for IOPOLL (not scored)
- [GSD-2023-1002114](https://insights.sbomify.com/GSD-2023-1002114/): btrfs: always report error in run_one_delayed_ref() (not scored)
- [GSD-2023-1002113](https://insights.sbomify.com/GSD-2023-1002113/): Bluetooth: hci_qca: Fix driver shutdown on closed serdev (not scored)
- [GSD-2023-1002112](https://insights.sbomify.com/GSD-2023-1002112/): f2fs: let's avoid panic if extent_tree is not created (not scored)
- [GSD-2023-1002111](https://insights.sbomify.com/GSD-2023-1002111/): fbdev: omapfb: avoid stack overflow warning (not scored)
- [GSD-2023-1002110](https://insights.sbomify.com/GSD-2023-1002110/): wifi: mac80211: sdata can be NULL during AMPDU start (not scored)
- [GSD-2023-1002109](https://insights.sbomify.com/GSD-2023-1002109/): usb: xhci: Check endpoint is valid before dereferencing it (not scored)
- [GSD-2023-1002108](https://insights.sbomify.com/GSD-2023-1002108/): Add exception protection processing for vd in axi_chan_handle_err function (not scored)
- [GSD-2023-1002107](https://insights.sbomify.com/GSD-2023-1002107/): nilfs2: fix general protection fault in nilfs_btree_insert() (not scored)
- [GSD-2023-1002106](https://insights.sbomify.com/GSD-2023-1002106/): xhci: Fix null pointer dereference when host dies (not scored)
- [GSD-2023-1002105](https://insights.sbomify.com/GSD-2023-1002105/): misc: fastrpc: Don't remove map on creater_process and device_release (not scored)
- [GSD-2023-1002104](https://insights.sbomify.com/GSD-2023-1002104/): misc: fastrpc: Fix use-after-free race condition for maps (not scored)
- [GSD-2023-1002103](https://insights.sbomify.com/GSD-2023-1002103/): btrfs: fix race between quota rescan and disable leading to NULL pointer deref (not scored)
- [GSD-2023-1002102](https://insights.sbomify.com/GSD-2023-1002102/): btrfs: do not abort transaction on failure to write log tree when syncing log (not scored)
- [GSD-2023-1002101](https://insights.sbomify.com/GSD-2023-1002101/): tty: fix possible null-ptr-defer in spk_ttyio_release (not scored)
- [GSD-2023-1002100](https://insights.sbomify.com/GSD-2023-1002100/): tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (not scored)
- [GSD-2023-1002099](https://insights.sbomify.com/GSD-2023-1002099/): USB: gadgetfs: Fix race between mounting and unmounting (not scored)
- [GSD-2023-1002098](https://insights.sbomify.com/GSD-2023-1002098/): dmaengine: idxd: Let probe fail when workqueue cannot be enabled (not scored)
- [GSD-2023-1002097](https://insights.sbomify.com/GSD-2023-1002097/): usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (not scored)
- [GSD-2023-1002096](https://insights.sbomify.com/GSD-2023-1002096/): gsmi: fix null-deref in gsmi_get_variable (not scored)
- [GSD-2023-1002095](https://insights.sbomify.com/GSD-2023-1002095/): drm/amd/display: Calculate output_color_space after pixel encoding adjustment (not scored)
- [GSD-2023-1002094](https://insights.sbomify.com/GSD-2023-1002094/): octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (not scored)
- [GSD-2023-1002093](https://insights.sbomify.com/GSD-2023-1002093/): octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (not scored)
- [GSD-2023-1002092](https://insights.sbomify.com/GSD-2023-1002092/): Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" (not scored)
- [GSD-2023-1002091](https://insights.sbomify.com/GSD-2023-1002091/): dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (not scored)
- [GSD-2023-1002090](https://insights.sbomify.com/GSD-2023-1002090/): HID: intel_ish-hid: Add check for ishtp_dma_tx_map (not scored)
- [GSD-2023-1002089](https://insights.sbomify.com/GSD-2023-1002089/): reset: uniphier-glue: Fix possible null-ptr-deref (not scored)
- [GSD-2023-1002088](https://insights.sbomify.com/GSD-2023-1002088/): EDAC/highbank: Fix memory leak in highbank_mc_probe() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/99/