2023 CVEs (page 16)
Page 16 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53123 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug On s390 PCI func… |
CVE-2023-53121 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tcp: tcp_make_synack() can be called from process context tcp_rtx_synack() now could be c… |
CVE-2023-53120 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix config page DMA memory leak A fix for: DMA-API: pci 0000:83:00.0: devi… |
CVE-2023-53119 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533_out_arg properly struct pn533_out_arg used as a tempo… |
CVE-2023-53118 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsi_proc_hostdir_rm() decreas… |
CVE-2023-53117 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id… |
CVE-2023-53116 | Critical | 9.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() oper… |
CVE-2023-53115 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc() Don't allocate memory again when IOC… |
CVE-2023-53114 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detec… |
CVE-2023-53113 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix NULL-ptr deref in offchan check If, e.g. in AP mode, the link was alre… |
CVE-2023-53112 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/sseu: fix max_subslices array-index-out-of-bounds access It seems that commit bc… |
CVE-2023-53111 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_filebacked() calls blk_mq_complete_request() synch… |
CVE-2023-53110 | High | 7.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() When performing a stress test on SM… |
CVE-2023-53109 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can apparentl… |
CVE-2023-53108 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: Fix size of interrupt data iucv_irq_data needs to be 4 bytes larger. These byte… |
CVE-2023-53107 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: veth: Fix use after free in XDP_REDIRECT Commit 718a18a0c8a6 ("veth: Rework veth_xdp_rcv_… |
CVE-2023-53106 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition This bug influen… |
CVE-2023-53105 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix cleanup null-ptr deref on encap lock During module is unloaded while a pee… |
CVE-2023-53103 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails syzbot reported a w… |
CVE-2023-53102 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ice: xsk: disable txq irq before flushing hw ice_qp_dis() intends to stop a given queue p… |
CVE-2023-53101 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: zero i_disksize when initializing the bootloader inode If the boot loader inode has… |
CVE-2023-53100 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4_update_inline_data Syzbot found the following issue: EXT4-fs (l… |
CVE-2023-53099 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: firmware: xilinx: don't make a sleepable memory allocation from an atomic context The fol… |
CVE-2023-53098 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM… |
CVE-2023-53097 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: fix memory leak with using debugfs_lookup() When calling debugfs_lookup()… |
CVE-2023-53096 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: interconnect: fix mem leak when freeing nodes The node link array is allocated when addin… |
CVE-2023-53095 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the p… |
CVE-2023-53094 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsl_lpuart: fix race on RX DMA shutdown From time to time DMA completion can… |
CVE-2023-53093 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers Histogram values can not be stri… |
CVE-2023-53092 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly… |
CVE-2023-53091 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after journal replay When mounting a crafted ex… |
CVE-2023-53090 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfd_wait_on_events() function, the kfd_ev… |
CVE-2023-53089 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4_xattr_delete_inode Syzbot reported a hung task problem: =====… |
CVE-2023-53088 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the… |
CVE-2023-53087 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/active: Fix misuse of non-idle barriers as fence trackers Users reported oopses… |
CVE-2023-53086 | High | 8.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just fo… |
CVE-2023-53085 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buff… |
CVE-2023-53084 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drm_gem_shmem_mmap() doesn't ow… |
CVE-2023-53083 | Critical | 9.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nfsd: don't replace page in rq_pages if it's a continuation of last page The splice read… |
CVE-2023-53082 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix the crash in hot unplug with vp_vdpa While unplugging the vp_vdpa device, it… |
CVE-2023-53081 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into… |
CVE-2023-53080 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: xsk: Add missing overflow check in xdp_umem_reg The number of chunks can overflow u32. Ma… |
CVE-2023-53079 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix steering rules cleanup vport's mc, uc and multicast rules are not deleted i… |
CVE-2023-53078 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() If alua_rtpg_queue() faile… |
CVE-2023-53077 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSi… |
CVE-2023-53075 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookup_rec() when index is 0 KASAN reported follow… |
CVE-2023-53074 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini The call trace occurs when the am… |
CVE-2023-53073 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' (which contains the… |
CVE-2023-53072 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token… |
CVE-2023-53071 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76_unregister_device() on unregistered hw Trying to probe a mt79… |
CVE-2023-53070 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent Commit 0c80f9e16… |
CVE-2023-53069 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu for the allocated "vf… |
CVE-2023-53068 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descripto… |
CVE-2023-53067 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Only call get_timer_irq() once in constant_clockevent_init() Under CONFIG_DEBU… |
CVE-2023-53066 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure th… |
CVE-2023-53065 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output… |
CVE-2023-53064 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: iavf: fix hang on reboot with ice When a system with E810 with existing VFs gets rebooted… |
CVE-2023-53062 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descript… |
CVE-2023-53061 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2_open() Reference count of acls will leak when m… |
CVE-2023-53060 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: igb: revert rtnl_lock() that causes deadlock The commit 6faee3d4ee8b ("igb: Add lock to a… |
CVE-2023-53059 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl It is possible to peep… |
CVE-2023-53058 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "v… |
CVE-2023-53057 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix global-out-of-bounds To loop a variable-length array, hci_init_stage_… |
CVE-2023-53056 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Synchronize the IOCB count to be in order A system hang was observed with… |
CVE-2023-53055 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete() fscrypt_destroy_keyring() must be cal… |
CVE-2023-53054 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hw_enable upon suspend resume Each time the platform goes… |
CVE-2023-53053 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skb_mac_header() in ndo_start_xmit() Drivers should not assume skb_mac… |
CVE-2023-53052 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix use-after-free bug in refresh_cache_worker() The UAF bug occurred because we we… |
CVE-2023-53051 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() The loop in dmcrypt_write may be running… |
CVE-2023-53050 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in margining Memory for the usb4->margining needs to be rela… |
CVE-2023-53049 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() When ucsi_init() fails, ucsi… |
CVE-2023-53048 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix warning when handle discover_identity message Since both source and… |
CVE-2023-53047 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race conditio… |
CVE-2023-53046 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hci_cmd_sync_clear There is a potential race condition i… |
CVE-2023-53045 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: don't let userspace block driver unbind In the unbind callback for… |
CVE-2023-53044 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate alloc_percpu failure Check alloc_precpu()'s return valu… |
CVE-2023-53043 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent If the controller is not… |
CVE-2023-53042 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit [WHY] Writing to DRR registers such as OTG… |
CVE-2023-53041 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Perform lockless command completion in abort path While adding and removin… |
CVE-2023-53040 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ca8210: fix mac_len negative array access This patch fixes a buffer overflow access of sk… |
CVE-2023-53039 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notif… |
CVE-2023-53038 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() If kzalloc() fails in lpfc_sli… |
CVE-2023-53037 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer sup… |
CVE-2023-53036 | Medium | 5.5 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix call trace warning and hang when removing amdgpu device On GPUs with RAS… |
CVE-2023-53035 | High | 7.1 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() The ioctl helper function nilfs_io… |
CVE-2023-46669 | Medium | 6.2 | 2025-05-01 | Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersona… |
CVE-2023-45721 | Medium | 5.3 | 2025-04-30 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
CVE-2023-37535 | High | 7.1 | 2025-04-30 | Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. |
CVE-2023-37517 | Low | 3.2 | 2025-04-30 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. |
CVE-2023-42404 | Medium | 4.9 | 2025-04-28 | OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution. |
CVE-2023-35817 | Medium | 5.0 | 2025-04-28 | DevExpress before 23.1.3 allows AsyncDownloader SSRF. |
CVE-2023-35816 | Low | 3.5 | 2025-04-28 | DevExpress before 23.1.3 allows arbitrary TypeConverter conversion. |
CVE-2023-35815 | Low | 3.5 | 2025-04-28 | DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data. |
CVE-2023-35814 | Low | 3.5 | 2025-04-28 | DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms. |
CVE-2023-37516 | Low | 3.2 | 2025-04-24 | Missing "no cache" headers in HCL Leap permits user directory information to be cached. |
CVE-2023-45720 | Medium | 5.3 | 2025-04-24 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
CVE-2023-37534 | High | 7.1 | 2025-04-24 | Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters. |
CVE-2023-44755 | Critical | 9.8 | 2025-04-22 | Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php. |
CVE-2023-44753 | Medium | 6.1 | 2025-04-22 | A stored cross-site scripting (XSS) vulnerability fin Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted pa… |
CVE-2023-44752 | Critical | 9.8 | 2025-04-22 | An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php. |