CVEs from 2023

6,664 normalized CVEs published or assigned in this year.

Total
6,664
critical
critical 222
high
high 1,548
medium
medium 1,277
low
low 23
% Critical
3.3%
% with KEV
2.4%
% with exploit
2.5%

Top products

  • office 29
  • office_long_term_servicing_channel 15
  • 365_apps 14
  • openstack_platform 6
  • codeready_linux_builder_for_ibm_z_systems_eus 6
  • registrationmagic 6
  • codeready_linux_builder_eus 6
  • cbot_panel 6
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2023-52869 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to a… redhatsusedebian
CVE-2023-52674 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() Ensure the value passed to scarlett2_mixer_ctl_put() is between 0 and S… redhatsusedebian
CVE-2023-53752 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: net: deal with integer overflows in kmalloc_reserve() Blamed commit changed: ptr = kmalloc(size); if (ptr) size = k… redhatsusedebian
CVE-2023-52624 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before executing GPINT commands [Why] DMCUB can be in idle when we attempt to interface with the HW t… redhatsusedebian
CVE-2023-52689 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing mutex lock around get meter levels As scarlett2_meter_ctl_get() uses meter_level_map[], the data_mut… redhatsusedebian
CVE-2023-52690 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check to scom_debug_init_one() kasprintf() returns a pointer to dynamically allocated memory … redhatsusedebian
CVE-2023-51596 medium 5.5 2y ago Moderate: bluez security update redhatdebiansuserockylinux
CVE-2023-54114 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() As the call trace shows, skb_panic was caused by wrong sk… redhatsusedebian
CVE-2023-52585 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() Return invalid error code -EINVAL for invalid… redhatsusedebian
CVE-2023-54093 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_master_xfer, msg is controlled by user. When msg[i].buf is null… redhatsusedebian
CVE-2023-52621 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers These three bpf_map_{lookup,update,delete}_elem() helpers ar… redhatsusedebian
CVE-2023-52696 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a pointer to dynamically allocated memory w… redhatsusedebian
CVE-2023-52501 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring buffer while the ring buffer is active, the writer… redhatsusedebian
CVE-2023-52659 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type On 64-bit platforms, the pfn_to_kaddr() macro requires that th… redhatsusedebian
CVE-2023-52661 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() If clk_get_sys(..., "pll_d2_out0") fail… redhatsusedebian
CVE-2023-54113 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: rcu: dump vmalloc memory info safely Currently, for double invoke call_rcu(), will dump rcu_head objects memory info, if the obje… redhatsusedebian
CVE-2023-54095 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses fail_iommu_setup() registers the fail_iommu_bus_notifier struct to… redhatsusedebian
CVE-2023-53747 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF After a call to console_unlock() in vcs_write() the … redhatsusedebian
CVE-2023-52740 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch The RFI and STF security mitigation options can fl… redhatsusedebian
CVE-2023-52757 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no… redhatsusedebian
CVE-2023-53731 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issu… redhatsusedebian
CVE-2023-53264 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe Use devm_of_iomap() instead of of_iomap() to automatically han… redhatsusedebian
CVE-2023-53708 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects If a badly constructed firmware includes multiple `ACPI_TYPE_PACKAGE`… redhatsusedebian
CVE-2023-50229 medium 5.5 2y ago Moderate: bluez security update redhatdebiansuserockylinux
CVE-2023-52528 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ====… redhatrockylinuxsusedebian
CVE-2023-53173 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: tty: pcn_uart: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it… redhatsusedebian
CVE-2023-52697 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL sof_sdw_rt_sdca_jack_exit() are used by different codecs,… redhatsusedebian
CVE-2023-52634 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix disable_otg_wa logic [Why] When switching to another HDMI mode, we are unnecesarilly disabling/enabling FIFO… redhatsusedebian
CVE-2023-27349 medium 5.5 2y ago Moderate: bluez security update redhatdebianrockylinuxsuse
CVE-2023-54083 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, it will assign the phy dev to usb-phy dev and… redhatsusedebian
CVE-2023-52833 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date->evt_skb is NULL check fix crash because of null pointers [ 6104.969662] BUG: kernel NULL pointer der… redhatsusedebian
CVE-2023-52859 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allo… redhatsusedebian
CVE-2023-53505 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: clk: tegra: tegra124-emc: Fix potential memory leak The tegra and tegra needs to be freed in the error handling path, otherwise i… redhatsusedebian
CVE-2023-53702 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: s390/crypto: use vector instructions only if available for ChaCha20 Commit 349d03ffd5f6 ("crypto: s390 - add crypto library inter… redhatsusedebian
CVE-2023-7250 medium 5.5 2y ago Moderate: iperf3 security update redhatrockylinuxsusedebian
CVE-2023-53503 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat an invalid group number as BUG(), since i… redhatsusedebian
CVE-2023-53662 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} If the filename casefolding fails, we'll be leaking memory f… redhatsusedebian
CVE-2023-54066 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer In gl861_i2c_master_xfer, msg is controlled by user. When m… redhatsusedebian
CVE-2023-53861 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash… redhatsusedebian
CVE-2023-52462 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot… redhatsusedebian
CVE-2023-52473 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix NULL pointer dereference in zone registration error path If device_register() in thermal_zone_device_register_… redhatsusedebian
CVE-2023-53558 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() pr_info() is called with rtp->cbs_gbl_lock spin lock locked. … redhatsusedebian
CVE-2023-52635 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Synchronize devfreq_monitor_[start/stop] There is a chance if a frequent switch of the governor done in a loop resu… redhatsusedebian
CVE-2023-50967 medium 5.5 2y ago Moderate: jose security update redhatdebianrockylinux
CVE-2023-38709 medium 5.5 2y ago Moderate: httpd security update debianredhatrockylinuxsuse
CVE-2023-52455 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the bootloader/firmware doesn't setup the framebuffers, their address and size are… redhatsusedebian
CVE-2023-53858 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error If clk_get_rate() fails, the clk that has… redhatsusedebian
CVE-2023-52466 medium 5.5 2y ago RHSA-2024:9315: kernel security update (Moderate) redhatsuse
CVE-2023-52664 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aq_ring_… redhatsusedebian
CVE-2023-52498 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wide PM code It is reported that in low-memory situations the system-wide resume… redhatsusedebian
CVE-2023-53674 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register() devm_clk_notifier_register() allocates a devres resource for clk notifier bu… redhatsusedebian
CVE-2023-52751 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in smb2_query_info_compound() The following UAF was triggered when running fstests generic/072 wi… redhatsusedebian
CVE-2023-52758 medium 5.5 2y ago RHSA-2024:9315: kernel security update (Moderate) redhatsuse
CVE-2023-52445 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2_context_thr… redhatrockylinuxsusedebian
CVE-2023-44431 medium 5.5 2y ago Moderate: bluez security update redhatdebiansuserockylinux
CVE-2023-54019 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: sched/psi: use kernfs polling functions for PSI trigger polling Destroying psi trigger in cgroup_file_release causes UAF issues w… redhatsusedebian
CVE-2023-53572 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: use _safe list iterator to avoid a use after free This loop is freeing "clk" so it needs to use list_for_each_entr… redhatsusedebian
CVE-2023-52513 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails, the newly created endpoint unlinks the … redhatrockylinuxsusedebian
CVE-2023-53391 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs As the ramfs-based tmpfs uses ramfs_init_fs_context() for the … redhatsusedebian
CVE-2023-53395 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer ACPICA commit 90310989a0790032f5a0140741ff09b545af4bc5 According to the ACPI sp… redhatsusedebian
CVE-2023-53687 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk When the best clk is searched, we itera… redhatsusedebian
CVE-2023-53397 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in is_executable_section() The > comparison should be >= to prevent an out of bounds array access. redhatsusedebian
CVE-2023-53401 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() KCSAN found an issue in obj_stock_flush_required(): stock-… rockylinuxredhatsusedebian
CVE-2023-53596 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devres_release_all() only gets called if the … redhatsusedebian
CVE-2023-53597 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUS_IO_TIMEOUT exce… redhatsusedebian
CVE-2023-53402 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: kernel/printk/index.c: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() call… redhatsusedebian
CVE-2023-53613 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: dax: Fix dax_mapping_release() use after free A CONFIG_DEBUG_KOBJECT_RELEASE test of removing a device-dax region provider (like … redhatsusedebian
CVE-2023-53697 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() Memory pointed by 'nd_pmu->pmu.attr_groups' is allocated in fun… redhatsusedebian
CVE-2023-54010 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA commit 0d5f467d6a0ba852ea3aad68663cbc… redhatsusedebian
CVE-2023-53483 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc() may fail, clk_data->name might be NUL… redhatsusedebian
CVE-2023-53704 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() Replace of_iomap() and kzalloc() with devm_of_iomap() and d… redhatsusedebian
CVE-2023-51589 medium 5.5 2y ago Moderate: bluez security update redhatdebianrockylinuxsuse
CVE-2023-51580 medium 5.5 2y ago Moderate: bluez security update redhatdebiansuserockylinux
CVE-2023-54165 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: zsmalloc: move LRU update from zs_map_object() to zs_malloc() Under memory pressure, we sometimes observe the following crash: [… redhatsusedebian
CVE-2023-54268 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't wake up kswapd from fill_pool() syzbot is reporting a lockdep warning in fill_pool() because the allocation f… redhatsusedebian
CVE-2023-54271 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init blk-iocost sometimes causes the following crash… redhatsusedebian
CVE-2023-54267 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT lppaca_shared_proc() takes a pointer to the lppaca which is t… redhatsusedebian
CVE-2023-54146 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"), freei… redhatsusedebian
CVE-2023-53531 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request timeout handling When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll r… redhatsusedebian
CVE-2023-53470 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If devlink_alloc() fails and we try to use dev… redhatsusedebian
CVE-2023-54136 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: serial: sprd: Fix DMA buffer leak issue Release DMA buffer when _probe() returns failure to avoid memory leak. redhatsusedebian
CVE-2023-54198 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in tty_driver_lookup_tty() When specifying an invalid console= device like console=tty3270, tty_dri… redhatsusedebian
CVE-2023-53230 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning in cifs_smb3_do_mount() This fixes the following warning reported by kernel test robot fs/smb/client/… redhatsusedebian
CVE-2023-53182 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid undefined behavior: applying zero offset to null pointer ACPICA commit 770653e3ba67c30a629ca7d12e352d83c2541b1e Be… redhatsusedebian
CVE-2023-53178 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, w… rockylinuxredhatsusedebian
CVE-2023-53249 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe Use devm_of_iomap() instead of of_iomap() to automatically handle th… redhatsusedebian
CVE-2023-53291 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale Running the 'kfree_rcu_test' test case [1] results in a … redhatsusedebian
CVE-2023-53176 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port->pm on port specific driver unbind When we unbind a serial port hardware specific 8250 driver, the gene… redhatsusedebian
CVE-2023-53068 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket b… redhatsusedebian
CVE-2023-52837 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_open Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and blk_cleanup_disk") cleans up disk by blk_cleanup_di… redhatsusedebian
CVE-2023-52932 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add cond_resched() in get_swap_pages() The softlockup still occurs in get_swap_pages() under memory pressure. 64 CP… redhatsusedebian
CVE-2023-52935 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vma is attached to the VMA, collapse_and_free_pmd() requires it to be locked. Pa… redhatsusedebian
CVE-2023-52475 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_config_complete syzbot has found a use-after-free bug [1] in the powermate dri… redhatsusedebian
CVE-2023-54194 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree The call stack shown below is a scenario in the Linux 4.19 kernel… redhatsusedebian
CVE-2023-54246 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() The rcuscale.holdoff module parameter can be used… redhatsusedebian
CVE-2023-41910 medium 5.5 2y ago Moderate: lldpd security update redhatalmalinuxrockylinuxdebian
CVE-2023-51592 medium 5.5 2y ago Moderate: bluez security update redhatdebiansuserockylinux
CVE-2023-52637 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) Lock jsk->sk to prevent UAF when setsockopt(..., … redhatsusedebian
CVE-2023-54301 medium 5.5 2y ago In the Linux kernel, the following vulnerability has been resolved: serial: 8250_bcm7271: fix leak in `brcmuart_probe` Smatch reports: drivers/tty/serial/8250/8250_bcm7271.c:1120 brcmuart_probe() w… redhatsusedebian
CVE-2023-51594 medium 5.5 2y ago Moderate: bluez security update redhatdebiansuserockylinux