2023 CVEs (page 10)
Page 10 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53570 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() nl80211_parse_mbssid_… |
CVE-2023-53569 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ext2: Check block size validity during mount Check that log of block size stored in the s… |
CVE-2023-53568 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if dev_set_name() fails When dev_set_name() fails, zcdn_cr… |
CVE-2023-53567 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver'… |
CVE-2023-53566 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix null deref on element insertion There is no guarantee that… |
CVE-2023-53565 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe() id argument being NULL The probe() id argument may be N… |
CVE-2023-53564 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix defrag path triggering jbd2 ASSERT code path: ocfs2_ioctl_move_extents ocfs2… |
CVE-2023-53563 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver After loading the amd-ps… |
CVE-2023-53562 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case… |
CVE-2023-53561 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume… |
CVE-2023-53560 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to hist_vars if they have referenced variables Hist tr… |
CVE-2023-53559 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to… |
CVE-2023-53558 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() pr_info() is called wi… |
CVE-2023-53557 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: fprobe: Release rethook after the ftrace_ops is unregistered While running bpf selftests… |
CVE-2023-53556 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vector… |
CVE-2023-53555 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: initialize damo_filter->list from damos_new_filter() damos_new_filter() is… |
CVE-2023-53554 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() The "exc->key_len"… |
CVE-2023-53553 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified… |
CVE-2023-53552 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i91… |
CVE-2023-53551 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_resume Consider a case where gse… |
CVE-2023-53550 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix global sysfs attribute type In commit 3666062b87ec ("cpufreq: am… |
CVE-2023-53549 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Rework long task execution when adding/deleting entries When adding/del… |
CVE-2023-53548 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb The syzbot fuzzer identified… |
CVE-2023-53547 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix sdma v4 sw fini error Fix sdma v4 sw fini error for sdma 4.2.2 to solve t… |
CVE-2023-53546 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx when mlx5_cmd_exec failed… |
CVE-2023-53545 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: unmap and remove csa_va properly Root PD BO should be reserved before unmap a… |
CVE-2023-53544 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: davinci: Fix clk use after free The remove function first frees the clks and onl… |
CVE-2023-53543 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check The vdpa_nl_policy struc… |
CVE-2023-53542 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy For some reason, the d… |
CVE-2023-53541 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write When the oob buff… |
CVE-2023-53540 | High | 7.1 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address a… |
CVE-2023-53539 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix incomplete state save in rxe_requester If a send packet is dropped by the I… |
CVE-2023-53538 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: btrfs: insert tree mod log move in push_node_left There is a fairly unlikely race conditi… |
CVE-2023-53537 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free for cached IPU bio xfstest generic/019 reports a bug: … |
CVE-2023-53536 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blk_crypto_evict_key() more robust If blk_crypto_evict_key() sees that t… |
CVE-2023-53535 | High | 7.1 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packet… |
CVE-2023-53534 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc As the devm_kcalloc may return NU… |
CVE-2023-53533 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe rpi_firmware_get() take referen… |
CVE-2023-28760 | High | 7.5 | 2025-10-02 | TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db_dir field to minid… |
CVE-2023-50300 | Medium | 5.1 | 2025-10-01 | IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls. |
CVE-2023-49883 | Medium | 5.9 | 2025-10-01 | IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to c… |
CVE-2023-49881 | Medium | 6.3 | 2025-10-01 | IBM Transformation Extender Advanced 10.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on t… |
CVE-2023-50301 | Low | 1.9 | 2025-10-01 | IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user. |
CVE-2023-53532 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware resources Currently, in ath11k_ahb_fw_reso… |
CVE-2023-53531 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request timeout handling When doing io_uring benchmark on /dev/nullb0… |
CVE-2023-53530 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The following cal… |
CVE-2023-53529 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix memory leak in rtw88_usb Kmemleak shows the following leak arising from… |
CVE-2023-53528 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fully succeed it is poss… |
CVE-2023-53527 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() The memory allocated in… |
CVE-2023-53526 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: jbd2: check 'jh->b_transaction' before removing it from checkpoint Following process will… |
CVE-2023-53525 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only As for multicast: - The SIDR is the onl… |
CVE-2023-53524 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer overflow oc… |
CVE-2023-53523 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb device driver is unloade… |
CVE-2023-53522 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is reporting circular l… |
CVE-2023-53521 | High | 7.1 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab-out-o… |
CVE-2023-53520 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees the hci_dev object bu… |
CVE-2023-53519 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting below error when using… |
CVE-2023-53518 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_head() allocates resou… |
CVE-2023-53517 | Critical | 9.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msg_max is too small in mtu negotiation When doing link mtu ne… |
CVE-2023-53516 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF The previous commit 954d1fa1… |
CVE-2023-53515 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifecycle because it h… |
CVE-2023-53514 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix memory leak of device names The device names allocated by dev_set_name()… |
CVE-2023-53513 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_io… |
CVE-2023-53512 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree(). |
CVE-2023-53511 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix fget leak when fs don't support nowait buffered read Heming reported a BUG… |
CVE-2023-53510 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_queuecommand() may be called two times… |
CVE-2023-53509 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qed_mcp_trace_dump() By default, qed_mcp_cmd_and_union() delays 10us… |
CVE-2023-53508 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interrupted In ublk_ctrl_start_dev(), if wai… |
CVE-2023-53507 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister devlink params in case interface is down Currently, in case an inter… |
CVE-2023-53506 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: udf: Do not bother merging very long extents When merging very long extents we try to pus… |
CVE-2023-53505 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: clk: tegra: tegra124-emc: Fix potential memory leak The tegra and tegra needs to be freed… |
CVE-2023-53504 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should… |
CVE-2023-53503 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat a… |
CVE-2023-53501 | Medium | 4.7 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind When unbin… |
CVE-2023-53500 | High | 7.3 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc… |
CVE-2023-53499 | High | 7.0 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwinding of XDP initialization When initializing XDP in virtnet_op… |
CVE-2023-53498 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null dereference The adev->dm.dc pointer can be NULL and d… |
CVE-2023-53497 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called() The vsp1 driver… |
CVE-2023-53496 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Use alternate source for socket to node data The UV code attempts to bui… |
CVE-2023-53495 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is a… |
CVE-2023-53494 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value o… |
CVE-2023-53493 | High | 8.4 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decode_message() Copy the bounds checking from enc… |
CVE-2023-53492 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not ignore genmask when looking up chain by id When adding a rul… |
CVE-2023-53491 | High | 7.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: start_kernel: Add __no_stack_protector function attribute Back during the discussion of c… |
CVE-2023-53490 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accept race Despite commit 0ad529d9fd2b ("mptcp: fix possible di… |
CVE-2023-53489 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. syzkaller reported [0] m… |
CVE-2023-53488 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible th… |
CVE-2023-53487 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas_flash: allow user copy to flash block cache objects With hardened usercopy e… |
CVE-2023-53486 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance the attribute size check This combines the overflow and boundary check… |
CVE-2023-53485 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev Syzkaller reported the fo… |
CVE-2023-53484 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj array entries When calling irq_set_affin… |
CVE-2023-53483 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc… |
CVE-2023-53482 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommu_group_alloc() If either iommu_group_grate_file() fails t… |
CVE-2023-53481 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed Following process w… |
CVE-2023-53480 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset… |
CVE-2023-53479 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE detected an user-aft… |
CVE-2023-53478 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tracing/synthetic: Fix races on freeing last_cmd Currently, the "last_cmd" variable can b… |
CVE-2023-53477 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation In function rt6_nlms… |
CVE-2023-53476 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() This condition ne… |
CVE-2023-53475 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, w… |