2023 CVEs (page 4)
Page 4 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-54184 | Critical | 9.8 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session free Commands from recovery entries are fr… |
CVE-2023-54183 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() If fwnode_gra… | |
CVE-2023-54182 | High | 7.1 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check readonly condition correctly With below case, it can mount multi-devic… |
CVE-2023-54181 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allow_ptr_leaks After we converted the capabilities of our ne… | |
CVE-2023-54180 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle case when repair happens with dev-replace [BUG] There is a bug report that… | |
CVE-2023-54179 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha->host_str' of… | |
CVE-2023-54178 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() when kmal… | |
CVE-2023-54177 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: quota: fix warning in dqgrab() There's issue as follows when do fault injection: WARNING… | |
CVE-2023-54176 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: mptcp: stricter state check in mptcp_worker As reported by Christoph, the mptcp protocol… | |
CVE-2023-54175 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path The xiic_xfer() function gets a… | |
CVE-2023-54174 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd group->iommufd… | |
CVE-2023-54173 | High | 7.8 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of kernel crash, which… |
CVE-2023-54172 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction On hardware that supp… | |
CVE-2023-54171 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak of iter->temp when reading trace_pipe kmemleak reports: unrefe… | |
CVE-2023-54170 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assoc_array When making a DNS query insi… | |
CVE-2023-54169 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_ptp_open When kvzalloc_node or kvzalloc failed in mlx… | |
CVE-2023-54168 | High | 7.8 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variabl… |
CVE-2023-54167 | | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: m68k: mm: Move initrd phys_to_virt handling after paging_init() When booting with an init… | |
CVE-2023-54166 | High | 7.8 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: igc: Fix Kernel Panic during ndo_tx_timeout callback The Xeon validation group has been c… |
CVE-2023-54165 | High | 7.8 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: zsmalloc: move LRU update from zs_map_object() to zs_malloc() Under memory pressure, we s… |
CVE-2023-54164 | High | 8.0 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix iso_conn related locking and validity issues sk->sk_state indicates w… |
CVE-2023-54162 | High | 8.8 | 2025-12-30 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2_lock() argv needs to be free when setup_async_wor… |
CVE-2023-41656 | Medium | 5.4 | 2025-12-30 | Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32238 | Medium | 5.4 | 2025-12-30 | Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery… |
CVE-2023-54160 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_sdei: Fix sleep from invalid context BUG Running a preempt-rt (v6.2-rc3-rt1… | |
CVE-2023-54159 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix kernel panic at qmu transfer done irq handler When handle qmu transfer irq… | |
CVE-2023-54158 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testin… | |
CVE-2023-54157 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc->vma in race with munmap() [ cmllamas: clean forward port from c… |
CVE-2023-54156 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting efx_net_stats() (.ndo_get_stats6… |
CVE-2023-54155 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() Syzkaller reported… | |
CVE-2023-54154 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix target_cmd_counter leak The target_cmd_counter struct allocated v… | |
CVE-2023-54153 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount failed after enabling quotas Yi found during a review of t… |
CVE-2023-54152 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by moving j1939_sk_errqueue() This commit addresses a deadlo… | |
CVE-2023-54151 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: Fix system crash due to lack of free space in LFS When f2fs tries to checkpoint dur… |
CVE-2023-54150 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix an out of bounds error in BIOS parser The array is hardcoded to 8 in atomfir… | |
CVE-2023-54149 | High | 7.5 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: avoid suspicious RCU usage for synced VLAN-aware MAC addresses When using the f… |
CVE-2023-54148 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor neigh cleanup to profile cleanup_tx For IP tunnel encapsulati… | |
CVE-2023-54147 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the… | |
CVE-2023-54146 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix me… | |
CVE-2023-54145 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log It's trivial for user t… | |
CVE-2023-54144 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kernel warning during topology setup This patch fixes the following kerne… | |
CVE-2023-54143 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() If we encounter any… | |
CVE-2023-54142 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in __gtp_encap_destroy(). syzkaller reported use-after-free in __… |
CVE-2023-54141 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 During sending data aft… | |
CVE-2023-54140 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse A syzbot stress te… |
CVE-2023-54139 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure write index cannot be negative The write index indicates whic… |
CVE-2023-54138 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq uninstall In case of early initialisation errors and on pl… | |
CVE-2023-54137 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix cap_migration information leak Fix an information leak where an uninitial… | |
CVE-2023-54136 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: serial: sprd: Fix DMA buffer leak issue Release DMA buffer when _probe() returns failure… | |
CVE-2023-54135 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() Check the write offset… |
CVE-2023-54134 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: autofs: fix memory leak of waitqueues in autofs_catatonic_mode Syzkaller reports a memory… | |
CVE-2023-54133 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: nfp: clean mc addresses in application firmware when closing port When moving devices fro… | |
CVE-2023-54132 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a cr… |
CVE-2023-54131 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: Fix memory leak when handling surveys When removing a rt2x00 device, its as… | |
CVE-2023-54130 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling Commit 55d1cbbbb… |
CVE-2023-54129 | High | 7.1 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to… |
CVE-2023-54128 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When cleaning up peer group ids in the failu… |
CVE-2023-54127 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() Syzkaller reported… |
CVE-2023-54126 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Cleanup ring IRQ workqueues on load failure A failure loading the safe… | |
CVE-2023-54125 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Return error for inconsistent extended attributes ntfs_read_ea is called when w… |
CVE-2023-54124 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all dirty pages during umount() if cp_error is set xfstest generic/361… |
CVE-2023-54123 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf->bio_split' In the error path of raid10_run(), 'conf' ne… | |
CVE-2023-54122 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add check for cstate As kzalloc may fail and return NULL pointer, it should… | |
CVE-2023-54121 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect splitting in btrfs_drop_extent_map_range In production we were seein… |
CVE-2023-54120 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a potential race condition… |
CVE-2023-54119 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with ino… | |
CVE-2023-54118 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: setup GPIO controller later in probe The GPIO controller component of… | |
CVE-2023-54117 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: s390/dcssblk: fix kernel crash with list_add corruption Commit fb08a1908cb1 ("dax: simpli… | |
CVE-2023-54116 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-generic: prohibit potential out-of-bounds access The fbdev test of IGT may writ… |
CVE-2023-54115 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() When nonstatic… | |
CVE-2023-54114 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() As the call trace… | |
CVE-2023-54113 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: rcu: dump vmalloc memory info safely Currently, for double invoke call_rcu(), will dump r… | |
CVE-2023-54112 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: kcm: Fix memory leak in error path of kcm_sendmsg() syzbot reported a memory leak like be… | |
CVE-2023-54111 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups of_find_node_by_pha… | |
CVE-2023-54110 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: usb: rndis_host: Secure rndis_query check against int overflow Variables off and len type… | |
CVE-2023-54109 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount leak in probe and remove function rcar_fcp_get() take refe… | |
CVE-2023-54108 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The following message and call… | |
CVE-2023-54107 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: dropping parent refcount after pd_free_fn() is done Some cgroup policies will… |
CVE-2023-54106 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5e_init_rep_rx The memory pointed to by the pri… | |
CVE-2023-54105 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotp_bind() Add missing check to block non-AF_CA… | |
CVE-2023-54104 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs' is copied in 'fun-… |
CVE-2023-54102 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow A static code analysis… | |
CVE-2023-54101 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: use _safe loop iterator to avoid a use after free The hash_for_each_… | |
CVE-2023-54100 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix use after free bug in qedi_remove() In qedi_probe() we call __qedi_probe(… |
CVE-2023-54099 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs: Protect reconfiguration of sb read-write from racing writes The reconfigure / remount… | |
CVE-2023-54098 | High | 7.3 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane… |
CVE-2023-54097 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166… | |
CVE-2023-54096 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses two completion structu… |
CVE-2023-54095 | High | 7.0 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses fail_iommu_setup() registe… |
CVE-2023-54094 | Critical | 9.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruption… |
CVE-2023-54093 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is con… | |
CVE-2023-54092 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corres… |
CVE-2023-54091 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and never f… | |
CVE-2023-54090 | Critical | 9.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix panic during XDP_TX with > 64 CPUs Commit 4fe815850bdc ("ixgbe: let the xdpdrv… |
CVE-2023-54089 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: add the missing REQ_OP_WRITE for flush bio When doing mkfs.xfs on a pmem dev… | |
CVE-2023-54088 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: hold queue_lock when removing blkg->q_node When blkg is removed from q->blkg_… |
CVE-2023-54087 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ubi: Fix possible null-ptr-deref in ubi_free_volume() It willl cause null-ptr-deref in th… | |
CVE-2023-54086 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add preempt_count_{sub,add} into btf id deny list The recursion check in __bpf_prog_… | |
CVE-2023-54085 | High | 7.5 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback… |
CVE-2023-54084 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-digi00x: prevent potential use after free This code was supposed to return… |