CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
KernelLinuxnet/mlx5: Fix command stats access after freeNo scoreKernelLinuxnet/sched: act_mpls: Fix warning during failed attribute validationNo scoreKernelLinuxnet/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parentNo scoreKernelLinuxnet/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY)No scoreKernelLinuxocteontx2-pf: Fix resource leakage in VF driver unbindNo scoreKernelLinuxplatform/x86/amd: Fix refcount leak in amd_pmc_probeNo scoreKernelLinuxplatform/surface: aggregator: Add missing call to ssam_request_sync_free()No scoreKernelLinuxALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()No scoreKernelLinuxefi: fix NULL-deref in init error pathNo scoreKernelLinuxio_uring/io-wq: only free worker if it was allocated for creationNo scoreKernelLinuxio_uring: lock overflowing for IOPOLLNo scoreKernelLinuxBluetooth: hci_qca: Fix driver shutdown on closed serdevNo scoreKernelLinuxbtrfs: always report error in run_one_delayed_ref()No scoreKernelLinuxf2fs: let's avoid panic if extent_tree is not createdNo scoreKernelLinuxfbdev: omapfb: avoid stack overflow warningNo scoreKernelLinuxwifi: mac80211: fix initialization of rx->link and rx->link_staNo scoreKernelLinuxnommu: fix memory leak in do_mmap() error pathNo scoreKernelLinuxproc: fix PIE proc-empty-vm, proc-pid-vm testsNo scoreKernelLinuxwifi: mac80211: sdata can be NULL during AMPDU startNo scoreKernelLinuxusb: xhci: Check endpoint is valid before dereferencing itNo scoreKernelLinuxnilfs2: fix general protection fault in nilfs_btree_insert()No scoreKernelLinuxAdd exception protection processing for vd in axi_chan_handle_err functionNo scoreKernelLinuxmisc: fastrpc: Fix use-after-free and race in fastrpc_map_findNo scoreKernelLinuxmisc: fastrpc: Don't remove map on creater_process and device_releaseNo scoreKernelLinuxmisc: fastrpc: Fix use-after-free race condition for mapsNo scoreKernelLinuxmm/hugetlb: fix PTE marker handling in hugetlb_change_protection()No scoreKernelLinuxxhci: Fix null pointer dereference when host diesNo scoreKernelLinuxbtrfs: qgroup: do not warn on record without old_roots populatedNo scoreKernelLinuxbtrfs: fix race between quota rescan and disable leading to NULL pointer derefNo scoreKernelLinuxtty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO bufferNo scoreKernelLinuxbtrfs: do not abort transaction on failure to write log tree when syncing logNo scoreKernelLinuxtty: fix possible null-ptr-defer in spk_ttyio_releaseNo scoreKernelLinuxio_uring/poll: don't reissue in case of poll race on multishot requestNo scoreKernelLinuxUSB: gadgetfs: Fix race between mounting and unmountingNo scoreKernelLinuxdmaengine: idxd: Let probe fail when workqueue cannot be enabledNo scoreKernelLinuxdmaengine: idxd: Prevent use after free on completion memoryNo scoreKernelLinuxusb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()No scoreKernelLinuxgsmi: fix null-deref in gsmi_get_variableNo scoreKernelLinuxdrm/amd/display: Calculate output_color_space after pixel encoding adjustmentNo scoreKernelLinuxocteontx2-pf: Avoid use of GFP_KERNEL in atomic contextNo scoreKernelLinuxVMCI: Use threaded irqs instead of taskletsNo scoreKernelLinuxocteontx2-pf: Fix the use of GFP_KERNEL in atomic context on rtNo scoreKernelLinuxpanic: Separate sysctl logic from CONFIG_SMPNo scorephpOSS-FuzzHeap-use-after-free in zend_generator_dtor_storageNo score- apache linkis, apache software foundation linkis (incubating) +1 moreApache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability6.5 Medium
- apache linkis, apache software foundation linkis (incubating) +1 moreApache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability8.8 High
- devttys0 yaffshivPath traversal in yaffshiv5.5 Medium
- jefferson project jeffersonPath traversal in jefferson5.5 Medium
- apache iotdb, apache software foundation iotdb workbench +1 moreApache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench8.8 High
- ubi reader project reader, jrspruitt ubi reader +1 morePath Traversal in ubi_reader5.5 Medium
- Show moreLoading…