CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
KernelLinuxx86/MCE/AMD: Clear DFR errors found in THR handlerNo scoreKernelLinuxcpufreq: Init completion before kobject_init_and_add()No scoreKernelLinuxmedia: s5p-mfc: Clear workbit to handle error conditionNo scoreKernelLinuxdm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadataNo scoreKernelLinuxmptcp: use proper req destructor for IPv6No scoreKernelLinuxdm thin: Use last transaction's pmd->root when commit failedNo scoreKernelLinuxdm thin: Fix UAF in run_timer_softirq()No scoreKernelLinuxobjtool: Fix SEGFAULTNo scoreKernelLinuxdm integrity: Fix UAF in dm_integrity_dtr()No scoreKernelLinuxdm cache: Fix UAF in destroy()No scoreKernelLinuxpowerpc/rtas: avoid device tree lookups in rtas_os_term()No scoreKernelLinuxpowerpc/rtas: avoid scheduling in rtas_os_term()No scoreKernelLinuxdm clone: Fix UAF in clone_dtr()No scoreKernelLinuxtracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_lineNo scoreKernelLinuxtracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'No scoreKernelLinuxstaging: media: tegra-video: fix device_node use after freeNo scoreKernelLinuxmedia: dvb-core: Fix double free in dvb_register_device()No scoreKernelLinuxALSA: line6: fix stack overflow in line6_midi_transmitNo scoreKernelLinuxmd: fix a crash in mempool_freeNo scoreKernelLinuxipmi: fix use after free in _ipmi_destroy_user()No scoreKernelLinuxPCI/sysfs: Fix double free in error pathNo scoreKernelLinuxparisc: led: Fix potential null-ptr-deref in start_task()No scoreKernelLinuxdrm/vmwgfx: Validate the box size for the snooped cursorNo scoreKernelLinuxbtrfs: fix resolving backrefs for inline extent followed by preallocNo scoreKernelLinuxext4: silence the warning when evicting inode with dioread_nolockNo scoreKernelLinuxfs: ext4: initialize fsdata in pagecache_write()No scoreKernelLinuxext4: fix undefined behavior in bit shift for ext4_check_flag_valuesNo scoreKernelLinuxext4: fix reserved cluster accounting in __es_remove_extent()No scoreKernelLinuxext4: disable fast-commit of encrypted dir operationsNo scoreKernelLinuxext4: fix leaking uninitialized memory in fast-commit journalNo scoreKernelLinuxext4: don't set up encryption key during jbd2 transactionNo scoreKernelLinuxARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmodNo scoreKernelLinuxext4: fix corruption when online resizing a 1K bigalloc fsNo score- pokemon-database-php project pokemon-database-phpVictorFerraresi pokemon-database-php sql injection5.5 Medium
- saemorris theradsystemsaemorris TheRadSystem _login.php redirect sql injection7.3 High
KernelLinuxmedia: dvb-core: Fix UAF due to refcount races at releasingNo score- galaxyproject galaxygalaxy-data-resource Command Line Template injection5.5 Medium
KernelLinuxmd/bitmap: Fix bitmap chunk size overflow issuesNo scoreKernelLinuxext4: fix deadlock due to mbcache entry corruptionNo scoreKernelLinuxPCI: Fix pci_device_is_present() for VFs by checking PFNo scoreKernelLinuxdrm/panfrost: Fix GEM handle creation ref-countingNo scoreKernelLinuxnet: sched: fix memory leak in tcindex_set_parmsNo scoreKernelLinuxqlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failureNo scoreKernelLinuxnfc: Fix potential resource leaksNo scoreKernelLinuxext4: fix use-after-free in ext4_orphan_cleanupNo scoreKernelLinuxext4: add EXT4_IGET_BAD flag to prevent unexpected bad inodeNo scoreKernelLinuxext4: fix bug_on in __es_tree_search caused by bad quota inodeNo scoreKernelLinuxext4: check and assert if marking an no_delete evicting inode dirtyNo scoreKernelLinuxext4: fix bug_on in __es_tree_search caused by bad boot loader inodeNo scoreKernelLinuxnet: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probeNo score- Show moreLoading…