CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
KernelLinuxmm/khugepaged: invoke MMU notifiers in shmem/file collapse pathsNo scoreKernelLinuxxen/netback: Ensure protocol headers don't fall in the non-linear areaNo scoreKernelLinuxxen/netback: don't call kfree_skb() with interrupts disabledNo scoreKernelLinuxmedia: v4l2-dv-timings.c: fix too strict blanking sanity checksNo scoreKernelLinuxmemcg: fix possible use-after-free in memcg_write_event_control()No scoreKernelLinuxmm/gup: fix gup_pud_range() for daxNo scoreKernelLinuxnet: mana: Fix race on per-CQ variable napi work_doneNo scoreKernelLinuxio_uring: Fix a null-ptr-deref in io_tctx_exit_cb()No scoreKernelLinuxBluetooth: Fix crash when replugging CSR fake controllersNo scoreKernelLinuxHID: core: fix shift-out-of-bounds in hid_report_raw_eventNo scoreKernelLinuxdrm/shmem-helper: Remove errant put in error pathNo scoreKernelLinuxnet: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()No scoreKernelLinuxgpiolib: fix memory leak in gpiochip_setup_dev()No scoreKernelLinuxcan: af_can: fix NULL pointer dereference in can_rcv_filterNo scoreKernelLinuxnetfilter: ctnetlink: fix compilation warning after data race fixes in ct markNo scoreKernelLinuxgpio: amd8111: Fix PCI device reference count leakNo scoreKernelLinuxaf_unix: Get user_ns from in_skb in unix_diag_get_exact().No scoreKernelLinuxBluetooth: Fix not cleanup led when bt_init failsNo scoreKernelLinuxmac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()No scoreKernelLinuxocteontx2-pf: Fix potential memory leak in otx2_init_tc()No scoreKernelLinuxxen-netfront: Fix NULL sring after live migrationNo scoreKernelLinuxnet: mvneta: Prevent out of bounds read in mvneta_config_rss()No scoreKernelLinuxgpio/rockchip: fix refcount leak in rockchip_gpiolib_register()No scoreKernelLinuxNFC: nci: Bounds check struct nfc_target arraysNo scoreKernelLinuxnet: hisilicon: Fix potential use-after-free in hisi_femac_rx()No scoreKernelLinuxnet: mdio: fix unbalanced fwnode reference count in mdio_device_release()No scoreKernelLinuxnet: hisilicon: Fix potential use-after-free in hix5hd2_rx()No scoreKernelLinuxnet: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()No scoreKernelLinuxtipc: call tipc_lxc_xmit without holding node_read_lockNo scoreKernelLinuxethernet: aeroflex: fix potential skb leak in greth_init_rings()No scoreKernelLinuxdpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()No scoreKernelLinuxnet: thunderbolt: fix memory leak in tbnet_open()No scoreKernelLinuxipv6: avoid use-after-free in ip6_fragment()No scoreKernelLinuxnet: mvneta: Fix an out of bounds checkNo scoreKernelLinuxs390/qeth: fix use-after-free in hsciNo scoreKernelLinuxrtc: cmos: Fix event handler registration ordering issueNo scoreKernelLinuxASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()No scoreKernelLinuxPCI: mt7621: Add sentinel to quirks tableNo scoreKernelLinuxpinctrl: meditatek: Startup with the IRQs disabledNo scoreKernelLinuxudf: Discard preallocation before extending file with a holeNo scoreKernelLinuxusb: gadget: uvc: Prevent buffer overflow in setup handlerNo scoreKernelLinuxigb: Initialize mailbox message for VF resetNo scoreKernelLinuxperf: Fix perf_pending_task() UaFNo scoreKernelLinuxudf: Fix preallocation discarding at indirect extent boundaryNo scoreKernelLinuxudf: Fix extending file within last blockNo scoreKernelLinuxBluetooth: L2CAP: Fix u8 overflowNo scoreKernelLinuxbtrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()No scoreKernelLinuxclk: qcom: gdsc: Remove direct runtime PM callsNo scoreKernelLinuxiio: health: afe4404: Fix oob read in afe4404_[read|write]_rawNo scoreKernelLinuxiio: health: afe4403: Fix oob read in afe4403_read_rawNo score- Show moreLoading…