2023 CVEs (page 4)
Page 4 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-54135 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() Check the write offset… |
CVE-2023-54134 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: autofs: fix memory leak of waitqueues in autofs_catatonic_mode Syzkaller reports a memory… | |
CVE-2023-54133 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: nfp: clean mc addresses in application firmware when closing port When moving devices fro… | |
CVE-2023-54132 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a cr… |
CVE-2023-54131 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: Fix memory leak when handling surveys When removing a rt2x00 device, its as… | |
CVE-2023-54130 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling Commit 55d1cbbbb… |
CVE-2023-54129 | High | 7.1 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to… |
CVE-2023-54128 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When cleaning up peer group ids in the failu… |
CVE-2023-54127 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() Syzkaller reported… |
CVE-2023-54126 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Cleanup ring IRQ workqueues on load failure A failure loading the safe… | |
CVE-2023-54125 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Return error for inconsistent extended attributes ntfs_read_ea is called when w… |
CVE-2023-54124 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all dirty pages during umount() if cp_error is set xfstest generic/361… |
CVE-2023-54123 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf->bio_split' In the error path of raid10_run(), 'conf' ne… | |
CVE-2023-54122 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add check for cstate As kzalloc may fail and return NULL pointer, it should… | |
CVE-2023-54121 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect splitting in btrfs_drop_extent_map_range In production we were seein… |
CVE-2023-54120 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a potential race condition… |
CVE-2023-54119 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting event with invalid wd When inotify_freeing_mark() races with ino… | |
CVE-2023-54118 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: setup GPIO controller later in probe The GPIO controller component of… | |
CVE-2023-54117 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: s390/dcssblk: fix kernel crash with list_add corruption Commit fb08a1908cb1 ("dax: simpli… | |
CVE-2023-54116 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-generic: prohibit potential out-of-bounds access The fbdev test of IGT may writ… |
CVE-2023-54115 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() When nonstatic… | |
CVE-2023-54114 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() As the call trace… | |
CVE-2023-54113 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: rcu: dump vmalloc memory info safely Currently, for double invoke call_rcu(), will dump r… | |
CVE-2023-54112 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: kcm: Fix memory leak in error path of kcm_sendmsg() syzbot reported a memory leak like be… | |
CVE-2023-54111 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups of_find_node_by_pha… | |
CVE-2023-54110 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: usb: rndis_host: Secure rndis_query check against int overflow Variables off and len type… | |
CVE-2023-54109 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount leak in probe and remove function rcar_fcp_get() take refe… | |
CVE-2023-54108 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The following message and call… | |
CVE-2023-54107 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: dropping parent refcount after pd_free_fn() is done Some cgroup policies will… |
CVE-2023-54106 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5e_init_rep_rx The memory pointed to by the pri… | |
CVE-2023-54105 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotp_bind() Add missing check to block non-AF_CA… | |
CVE-2023-54104 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs' is copied in 'fun-… |
CVE-2023-54102 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow A static code analysis… | |
CVE-2023-54101 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: use _safe loop iterator to avoid a use after free The hash_for_each_… | |
CVE-2023-54100 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix use after free bug in qedi_remove() In qedi_probe() we call __qedi_probe(… |
CVE-2023-54099 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs: Protect reconfiguration of sb read-write from racing writes The reconfigure / remount… | |
CVE-2023-54098 | High | 7.3 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane… |
CVE-2023-54097 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166… | |
CVE-2023-54096 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses two completion structu… |
CVE-2023-54095 | High | 7.0 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses fail_iommu_setup() registe… |
CVE-2023-54094 | Critical | 9.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruption… |
CVE-2023-54093 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is con… | |
CVE-2023-54092 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corres… |
CVE-2023-54091 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is allocated and never f… | |
CVE-2023-54090 | Critical | 9.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix panic during XDP_TX with > 64 CPUs Commit 4fe815850bdc ("ixgbe: let the xdpdrv… |
CVE-2023-54089 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: add the missing REQ_OP_WRITE for flush bio When doing mkfs.xfs on a pmem dev… | |
CVE-2023-54088 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: hold queue_lock when removing blkg->q_node When blkg is removed from q->blkg_… |
CVE-2023-54087 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ubi: Fix possible null-ptr-deref in ubi_free_volume() It willl cause null-ptr-deref in th… | |
CVE-2023-54086 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add preempt_count_{sub,add} into btf id deny list The recursion check in __bpf_prog_… | |
CVE-2023-54085 | High | 7.5 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback… |
CVE-2023-54084 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-digi00x: prevent potential use after free This code was supposed to return… | |
CVE-2023-54083 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it wi… |
CVE-2023-54081 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain… | |
CVE-2023-54080 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write When doing a reloca… | |
CVE-2023-54079 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix poll_interval handling and races on remove Before this patch… |
CVE-2023-54078 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-time err… | |
CVE-2023-54077 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak if ntfs_read_mft failed Label ATTR_ROOT in ntfs_read_mft() sets… |
CVE-2023-54076 | Critical | 9.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper to get… |
CVE-2023-54075 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parse_dai_link_info Add missing of_node_put(… | |
CVE-2023-54074 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use correct encap attribute during invalidation With introduction of post acti… |
CVE-2023-54073 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site The following cr… | |
CVE-2023-54072 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential data race at PCM memory allocation helpers The PCM memory alloca… | |
CVE-2023-54071 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: use work to update rate to avoid RCU warning The ieee80211_ops::sta_rc_updat… |
CVE-2023-54070 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50f303496d92 ("igb: En… | |
CVE-2023-54069 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow When we calculate the end positio… | |
CVE-2023-54068 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() BUG_O… |
CVE-2023-54067 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting free space root from the dirty cow roots list When deleting… |
CVE-2023-54066 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer In gl861_i2c_master… | |
CVE-2023-54065 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: fix out-of-bounds access The probe function sets priv->chip_data to (v… |
CVE-2023-54064 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find… | |
CVE-2023-54063 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix OOB read in indx_insert_into_buffer Syzbot reported a OOB read bug: BUG: K… |
CVE-2023-54062 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4_xattr_move_to_block() In ext4_xattr_move_to_block… |
CVE-2023-54060 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Set end correctly when doing batch carry Even though the test suite covers this… |
CVE-2023-54059 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: mtk-svs: Enable the IRQ later If the system does not come from reset (like… | |
CVE-2023-54058 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check if ffa_driver remove is present before executing Currently ffa_d… | |
CVE-2023-54057 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpii… | |
CVE-2023-54056 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIG_FORTIFY_SOURCE, memcpy() wil… | |
CVE-2023-54055 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix memory leak of PBLE objects On rmmod of irdma, the PBLE object memory is… | |
CVE-2023-54053 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwl_pci_pr… | |
CVE-2023-54052 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be dropped if the frame… | |
CVE-2023-54051 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: do not allow gso_size to be set to GSO_BY_FRAGS One missing check in virtio_net_hdr_… | |
CVE-2023-54050 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memleak when insert_old_idx() failed Following process will cause a memleak fo… |
CVE-2023-54049 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: Add check for kstrdup Add check for the return value of kstrdup() and retur… | |
CVE-2023-54048 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions after qp destroy HW may generate completio… |
CVE-2023-54047 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_hdmi: cleanup drm encoder during unbind This fixes a use-after-free cras… | |
CVE-2023-54046 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Handle EBUSY correctly As it is essiv only handles the special return val… |
CVE-2023-54045 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: audit: fix possible soft lockup in __audit_inode_child() Tracefs or debugfs maybe cause h… | |
CVE-2023-54044 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: spmi: Add a check for remove callback when removing a SPMI driver When removing a SPMI dr… | |
CVE-2023-54043 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The hwpt is added to the h… |
CVE-2023-40679 | Medium | 6.5 | 2025-12-24 | Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-36525 | High | 8.6 | 2025-12-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPJobBoard allows Blind SQL Injection.This issue affects… |
CVE-2023-32120 | Medium | 5.9 | 2025-12-24 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bob Hostel allows DOM-Based XSS.This issue affects… |
CVE-2023-28619 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in bnayawpguy Resoto allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Resoto: fro… |
CVE-2023-54042 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix VAS mm use after free The refcount on mm is dropped before the coprocess… |
CVE-2023-54041 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers… | |
CVE-2023-54040 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix wrong fallback logic for FDIR When adding a FDIR filter, if ice_vc_fdir_set_irq_… |
CVE-2023-54039 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access In the j1939_tp_tx_dat… | |
CVE-2023-54038 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link hci_connect_sco… | |
CVE-2023-54037 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ice: prevent NULL pointer deref during reload Calling ethtool during reload can lead to c… | |
CVE-2023-54036 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chi… |