2023 CVEs (page 5)
Page 5 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-54083 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it wi… |
CVE-2023-54081 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain… | |
CVE-2023-54080 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: skip splitting and logical rewriting on pre-alloc write When doing a reloca… | |
CVE-2023-54079 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx: Fix poll_interval handling and races on remove Before this patch… |
CVE-2023-54078 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-time err… | |
CVE-2023-54077 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak if ntfs_read_mft failed Label ATTR_ROOT in ntfs_read_mft() sets… |
CVE-2023-54076 | Critical | 9.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() helper to get… |
CVE-2023-54075 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parse_dai_link_info Add missing of_node_put(… | |
CVE-2023-54074 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use correct encap attribute during invalidation With introduction of post acti… |
CVE-2023-54073 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site The following cr… | |
CVE-2023-54072 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential data race at PCM memory allocation helpers The PCM memory alloca… | |
CVE-2023-54071 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: use work to update rate to avoid RCU warning The ieee80211_ops::sta_rc_updat… |
CVE-2023-54070 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50f303496d92 ("igb: En… | |
CVE-2023-54069 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow When we calculate the end positio… | |
CVE-2023-54068 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() BUG_O… |
CVE-2023-54067 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting free space root from the dirty cow roots list When deleting… |
CVE-2023-54066 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer In gl861_i2c_master… | |
CVE-2023-54065 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: fix out-of-bounds access The probe function sets priv->chip_data to (v… |
CVE-2023-54064 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Fix a memory leak when scanning for an adapter The adapter scan ssif_info_find… | |
CVE-2023-54063 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix OOB read in indx_insert_into_buffer Syzbot reported a OOB read bug: BUG: K… |
CVE-2023-54062 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4_xattr_move_to_block() In ext4_xattr_move_to_block… |
CVE-2023-54060 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Set end correctly when doing batch carry Even though the test suite covers this… |
CVE-2023-54059 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: mtk-svs: Enable the IRQ later If the system does not come from reset (like… | |
CVE-2023-54058 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check if ffa_driver remove is present before executing Currently ffa_d… | |
CVE-2023-54057 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpii… | |
CVE-2023-54056 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIG_FORTIFY_SOURCE, memcpy() wil… | |
CVE-2023-54055 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix memory leak of PBLE objects On rmmod of irdma, the PBLE object memory is… | |
CVE-2023-54053 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwl_pci_pr… | |
CVE-2023-54052 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be dropped if the frame… | |
CVE-2023-54051 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: do not allow gso_size to be set to GSO_BY_FRAGS One missing check in virtio_net_hdr_… | |
CVE-2023-54050 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memleak when insert_old_idx() failed Following process will cause a memleak fo… |
CVE-2023-54049 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: Add check for kstrdup Add check for the return value of kstrdup() and retur… | |
CVE-2023-54048 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions after qp destroy HW may generate completio… |
CVE-2023-54047 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_hdmi: cleanup drm encoder during unbind This fixes a use-after-free cras… | |
CVE-2023-54046 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Handle EBUSY correctly As it is essiv only handles the special return val… |
CVE-2023-54045 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: audit: fix possible soft lockup in __audit_inode_child() Tracefs or debugfs maybe cause h… | |
CVE-2023-54044 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: spmi: Add a check for remove callback when removing a SPMI driver When removing a SPMI dr… | |
CVE-2023-54043 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The hwpt is added to the h… |
CVE-2023-40679 | Medium | 6.5 | 2025-12-24 | Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-36525 | High | 8.6 | 2025-12-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPJobBoard allows Blind SQL Injection.This issue affects… |
CVE-2023-32120 | Medium | 5.9 | 2025-12-24 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bob Hostel allows DOM-Based XSS.This issue affects… |
CVE-2023-28619 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in bnayawpguy Resoto allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Resoto: fro… |
CVE-2023-54042 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix VAS mm use after free The refcount on mm is dropped before the coprocess… |
CVE-2023-54041 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers… | |
CVE-2023-54040 | High | 8.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix wrong fallback logic for FDIR When adding a FDIR filter, if ice_vc_fdir_set_irq_… |
CVE-2023-54039 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access In the j1939_tp_tx_dat… | |
CVE-2023-54038 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link hci_connect_sco… | |
CVE-2023-54037 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ice: prevent NULL pointer deref during reload Calling ethtool during reload can lead to c… | |
CVE-2023-54036 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chi… | |
CVE-2023-54035 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix underflow in chain reference counter Set element addition error… |
CVE-2023-54034 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Make sure to zero vfio_iommu_type1_info before copying to user Missed a zero ini… | |
CVE-2023-54033 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps The LRU and LRU_PERCPU maps al… | |
CVE-2023-54032 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race when deleting quota root from the dirty cow roots list When disabling quo… | |
CVE-2023-54031 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check The vdpa_nl_policy s… | |
CVE-2023-54030 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overflow multishot recv Don't allow overflowing multishot recv CQEs… | |
CVE-2023-54028 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the fu… | |
CVE-2023-54027 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: iio: core: Prevent invalid memory access when there is no parent Commit 813665564b3d ("ii… | |
CVE-2023-54026 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: opp: Fix use-after-free in lazy_opp_tables after probe deferral When dev_pm_opp_of_find_i… |
CVE-2023-54025 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled In case WoWlan was nev… | |
CVE-2023-54024 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy target device if coalesced MMIO unregistration fails Destroy and free the ta… | |
CVE-2023-54023 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between balance and cancel/pause Syzbot reported a panic that looks like… | |
CVE-2023-54022 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks at error path for UMP open The allocation and… | |
CVE-2023-54021 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to not… | |
CVE-2023-54020 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: pdma_desc memory leak fix Commit b2cc5c465c2c ("dmaengine: sf-pdma: A… | |
CVE-2023-54019 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: sched/psi: use kernfs polling functions for PSI trigger polling Destroying psi trigger in… |
CVE-2023-54018 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: Add missing check for alloc_ordered_workqueue Add check for the return valu… | |
CVE-2023-54017 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebus_bus_init() If device_register() retu… | |
CVE-2023-54016 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix memory leak in rx_desc and tx_desc Currently when ath12k_dp_cc_desc_ini… | |
CVE-2023-54015 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device In case devcom allocation… | |
CVE-2023-54014 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning… | |
CVE-2023-54013 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix locking for runpm vs reclaim For cases where icc_bw_set() can be called… | |
CVE-2023-54012 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: fix stack overflow when LRO is disabled for virtual interfaces When the virtual inte… |
CVE-2023-54011 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size (32 instead of 64 bytes… | |
CVE-2023-54010 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPI… | |
CVE-2023-54009 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path The cdns_i2c_mast… | |
CVE-2023-54008 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: virtio_vdpa: build affinity masks conditionally We try to build affinity mask via create_… | |
CVE-2023-54007 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: vmci_host: fix a race condition in vmci_host_poll() causing GPF During fuzzing, a general… | |
CVE-2023-54006 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-race around unix_tot_inflight. unix_tot_inflight is changed under spin_… | |
CVE-2023-54005 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binder_init() In binder_init(), the destruction of binder_allo… | |
CVE-2023-54004 | High | 7.5 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). syzbot reported [0]… |
CVE-2023-54003 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when create_ah fails If AH create request fails, releas… | |
CVE-2023-54002 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion of exclop condition when starting balance Balance as exclusive state… | |
CVE-2023-54001 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in _r8712_init_xmit_priv() In the above mentioned routine… | |
CVE-2023-54000 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix deadlock issue when externel_lb and reset are executed together When exter… | |
CVE-2023-53999 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra… | |
CVE-2023-53998 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data The virtio rng device kicks off a… | |
CVE-2023-53997 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: thermal: of: fix double-free on unregistration Since commit 3d439b1a2ad3 ("thermal/core… |
CVE-2023-53996 | Critical | 9.3 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() acc… |
CVE-2023-53995 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in __inet_del_ifa() I got the below warning when do fuzzing te… | |
CVE-2023-53994 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ionic: remove WARN_ON to prevent panic_on_warn Remove unnecessary early code development… | |
CVE-2023-53993 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y After a pci_doe_task completes, its… | |
CVE-2023-53992 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ocb: don't leave if not joined If there's no OCB state, don't ask the dri… | |
CVE-2023-53991 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Disallow unallocated resources to be returned In the event that the topology… | |
CVE-2023-53990 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifs_del_deferred_close funct… |
CVE-2023-53989 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: arm64: mm: fix VA-range sanity check Both create_mapping_noalloc() and update_mapping_pro… | |
CVE-2023-53988 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() Here is a BUG report from syzbot… |
CVE-2023-53987 | | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 ("ping: conv… | |
CVE-2023-53986 | High | 8.6 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358… |
CVE-2023-53867 | Critical | 9.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trimming caps When trimming the caps and just… |
CVE-2023-53982 | High | 7.5 | 2025-12-23 | PMB 7.4.6 contains a SQL injection vulnerability in the storage parameter of the ajax.php endpoint that allows remote attackers to manipulate database queries… |