2023 CVEs (page 11)
Page 11 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53527 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() The memory allocated in… |
CVE-2023-53526 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: jbd2: check 'jh->b_transaction' before removing it from checkpoint Following process will… |
CVE-2023-53525 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only As for multicast: - The SIDR is the onl… |
CVE-2023-53524 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer overflow oc… |
CVE-2023-53523 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb device driver is unloade… |
CVE-2023-53522 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is reporting circular l… |
CVE-2023-53521 | High | 7.1 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab-out-o… |
CVE-2023-53520 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees the hci_dev object bu… |
CVE-2023-53519 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting below error when using… |
CVE-2023-53518 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_head() allocates resou… |
CVE-2023-53517 | Critical | 9.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msg_max is too small in mtu negotiation When doing link mtu ne… |
CVE-2023-53516 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF The previous commit 954d1fa1… |
CVE-2023-53515 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifecycle because it h… |
CVE-2023-53514 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix memory leak of device names The device names allocated by dev_set_name()… |
CVE-2023-53513 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_io… |
CVE-2023-53512 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree(). |
CVE-2023-53511 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix fget leak when fs don't support nowait buffered read Heming reported a BUG… |
CVE-2023-53510 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_queuecommand() may be called two times… |
CVE-2023-53509 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qed_mcp_trace_dump() By default, qed_mcp_cmd_and_union() delays 10us… |
CVE-2023-53508 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interrupted In ublk_ctrl_start_dev(), if wai… |
CVE-2023-53507 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister devlink params in case interface is down Currently, in case an inter… |
CVE-2023-53506 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: udf: Do not bother merging very long extents When merging very long extents we try to pus… |
CVE-2023-53505 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: clk: tegra: tegra124-emc: Fix potential memory leak The tegra and tegra needs to be freed… |
CVE-2023-53504 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should… |
CVE-2023-53503 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat a… |
CVE-2023-53501 | Medium | 4.7 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind When unbin… |
CVE-2023-53500 | High | 7.3 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc… |
CVE-2023-53499 | High | 7.0 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwinding of XDP initialization When initializing XDP in virtnet_op… |
CVE-2023-53498 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null dereference The adev->dm.dc pointer can be NULL and d… |
CVE-2023-53497 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called() The vsp1 driver… |
CVE-2023-53496 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Use alternate source for socket to node data The UV code attempts to bui… |
CVE-2023-53495 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is a… |
CVE-2023-53494 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value o… |
CVE-2023-53493 | High | 8.4 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decode_message() Copy the bounds checking from enc… |
CVE-2023-53492 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not ignore genmask when looking up chain by id When adding a rul… |
CVE-2023-53491 | High | 7.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: start_kernel: Add __no_stack_protector function attribute Back during the discussion of c… |
CVE-2023-53490 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accept race Despite commit 0ad529d9fd2b ("mptcp: fix possible di… |
CVE-2023-53489 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. syzkaller reported [0] m… |
CVE-2023-53488 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible th… |
CVE-2023-53487 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas_flash: allow user copy to flash block cache objects With hardened usercopy e… |
CVE-2023-53486 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance the attribute size check This combines the overflow and boundary check… |
CVE-2023-53485 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev Syzkaller reported the fo… |
CVE-2023-53484 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj array entries When calling irq_set_affin… |
CVE-2023-53483 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc… |
CVE-2023-53482 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommu_group_alloc() If either iommu_group_grate_file() fails t… |
CVE-2023-53481 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed Following process w… |
CVE-2023-53480 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset… |
CVE-2023-53479 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE detected an user-aft… |
CVE-2023-53478 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tracing/synthetic: Fix races on freeing last_cmd Currently, the "last_cmd" variable can b… |
CVE-2023-53477 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation In function rt6_nlms… |
CVE-2023-53476 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() This condition ne… |
CVE-2023-53475 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, w… |
CVE-2023-53474 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bank_map Thee maximum number of MCA banks is 64 (MAX_NR_BANKS… |
CVE-2023-53473 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: improve error handling from ext4_dirhash() The ext4_dirhash() will *almost* never f… |
CVE-2023-53472 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a… |
CVE-2023-53471 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras gfx9 cp_e… |
CVE-2023-53470 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If dev… |
CVE-2023-53468 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in alloc_wbufs() kmemleak reported a sequence of memory leaks, and… |
CVE-2023-53467 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() Do `kfree_skb(new)` before… |
CVE-2023-53466 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit Always purge mcu skb queues in mt7… |
CVE-2023-53465 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: soundwire: qcom: fix storing port config out-of-bounds The 'qcom_swrm_ctrl->pconfig' has… |
CVE-2023-53464 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock s… |
CVE-2023-53463 | High | 7.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Do not reset dql stats on NON_FATAL err All ibmvnic resets, make a call to netde… |
CVE-2023-53462 | High | 7.1 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in fill_frame_info() Syzbot reports the following uninit-val… |
CVE-2023-53461 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring: wait interruptibly for request completions on exit WHen the ring exits, cleanup… |
CVE-2023-53460 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak in rtw_usb_probe() drivers/net/wireless/realtek/rtw88/usb.c… |
CVE-2023-53459 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: HID: mcp-2221: prevent UAF in delayed work If the device is plugged/unplugged without giv… |
CVE-2023-53458 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() When the… |
CVE-2023-53457 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin ma… |
CVE-2023-53456 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that qla4xxx… |
CVE-2023-53455 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drop all currently held locks if deadlock happens If vc4_hdmi_reset_link() retur… |
CVE-2023-53454 | High | 8.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput input_dev name Reference the… |
CVE-2023-53453 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload rad… |
CVE-2023-53452 | Medium | 4.7 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential race condition between napi_init and napi_enable A race condit… |
CVE-2023-53451 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential NULL pointer dereference Klocwork tool reported 'cur_dsd' ma… |
CVE-2023-53450 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the… |
CVE-2023-53449 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential memleak in dasd_eckd_init() `dasd_reserve_req` is allocated befo… |
CVE-2023-53448 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Removed unneeded release_mem_region Remove unnecessary release_mem_region f… |
CVE-2023-53447 | Medium | 4.7 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: f2fs: don't reset unchangable mount option in f2fs_remount() syzbot reports a bug as belo… |
CVE-2023-53446 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free Struct pcie_link_s… |
CVE-2023-53445 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtr_recvmsg() Syzbot reported a bug as following: refc… |
CVE-2023-53444 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix bulk_move corruption when adding a entry When the resource is the first in t… |
CVE-2023-53443 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak In arizona_clk32k_en… |
CVE-2023-53442 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vice versa ADQ and switchdev are not sup… |
CVE-2023-53441 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: bpf: cpumap: Fix memory leak in cpu_map_update_elem Syzkaller reported a memory leak as f… |
CVE-2023-53440 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support has issues with the… |
CVE-2023-53439 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: skb_partial_csum_set() fix against transport header magic value skb->transport_heade… |
CVE-2023-53438 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch (IF) u… |
CVE-2023-53437 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descriptors If the source entity does not co… |
CVE-2023-53436 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible memory leak if device_add() fails If device_add() returns error… |
CVE-2023-53435 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn_firmwa… |
CVE-2023-53434 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores The I… |
CVE-2023-53433 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: net: add vlan_get_protocol_and_depth() helper Before blamed commit, pskb_may_pull() was u… |
CVE-2023-53432 | High | 8.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: firewire: net: fix use after free in fwnet_finish_incoming_packet() The netif_rx() functi… |
CVE-2023-53431 | High | 8.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Handle enclosure with just a primary component gracefully This reverts commit… |
CVE-2023-53430 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup Fix device unregister memory… |
CVE-2023-53429 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't check PageError in __extent_writepage __extent_writepage currenly sets PageE… |
CVE-2023-53428 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: powercap: arm_scmi: Remove recursion while parsing zones Powercap zones can be defined as… |
CVE-2023-53427 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR reco… |
CVE-2023-53426 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xsk_diag use-after-free error during socket cleanup Fix a use-after-free error t… |