CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
KernelLinuxnetfilter: nft_payload: incorrect arithmetics when fetching VLAN header bitsNo scoreKernelLinuxdrm/virtio: Fix GEM handle creation UAFNo scoreKernelLinuxdrm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transferNo scoreKernelLinuxs390/cpum_sf: add READ_ONCE() semantics to compare and swap loopsNo scoreKernelLinuxixgbe: fix pci device refcount leakNo scoreKernelLinuxipv6: raw: Deduct extension header length in rawv6_push_pending_framesNo scoreKernelLinuxmm: Always release pages to the buddy allocator in memblock_free_late().No scoreKernelLinuxnetfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.No scoreKernelLinuxpowerpc/imc-pmu: Fix use of mutex in IRQs disabled sectionNo scoreKernelLinuxnfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()No scoreKernelLinuxnet/sched: act_mpls: Fix warning during failed attribute validationNo scoreKernelLinuxregulator: da9211: Use irq handler when readyNo scoreKernelLinuxefi: fix NULL-deref in init error pathNo scoreKernelLinuxio_uring/io-wq: only free worker if it was allocated for creationNo scoreKernelLinuxio_uring: lock overflowing for IOPOLLNo scoreKernelLinuxBluetooth: hci_qca: Fix driver shutdown on closed serdevNo scoreKernelLinuxf2fs: let's avoid panic if extent_tree is not createdNo scoreKernelLinuxbtrfs: always report error in run_one_delayed_ref()No scoreKernelLinuxwifi: mac80211: sdata can be NULL during AMPDU startNo scoreKernelLinuxAdd exception protection processing for vd in axi_chan_handle_err functionNo scoreKernelLinuxusb: xhci: Check endpoint is valid before dereferencing itNo scoreKernelLinuxnilfs2: fix general protection fault in nilfs_btree_insert()No scoreKernelLinuxxhci: Fix null pointer dereference when host diesNo scoreKernelLinuxmisc: fastrpc: Fix use-after-free race condition for mapsNo scoreKernelLinuxmisc: fastrpc: Don't remove map on creater_process and device_releaseNo scoreKernelLinuxbtrfs: fix race between quota rescan and disable leading to NULL pointer derefNo scoreKernelLinuxtty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO bufferNo scoreKernelLinuxUSB: gadgetfs: Fix race between mounting and unmountingNo scoreKernelLinuxgsmi: fix null-deref in gsmi_get_variableNo scoreKernelLinuxdrm/amd/display: Calculate output_color_space after pixel encoding adjustmentNo scoreKernelLinuxusb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()No scoreKernelLinuxnetfilter: nft_payload: incorrect arithmetics when fetching VLAN header bitsNo scoreKernelLinuxdrm/virtio: Fix GEM handle creation UAFNo scoreKernelLinuxs390/cpum_sf: add READ_ONCE() semantics to compare and swap loopsNo scoreKernelLinuxdrm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transferNo scoreKernelLinuxixgbe: fix pci device refcount leakNo scoreKernelLinuxipv6: raw: Deduct extension header length in rawv6_push_pending_framesNo scoreKernelLinuxmm: Always release pages to the buddy allocator in memblock_free_late().No scoreKernelLinuxiommu/iova: Fix alloc iova overflows issueNo scoreKernelLinuxsched/core: Fix use-after-free bug in dup_user_cpus_ptr()No scoreKernelLinuxnetfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.No scoreKernelLinuxpowerpc/imc-pmu: Fix use of mutex in IRQs disabled sectionNo scoreKernelLinuxnfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()No scoreKernelLinuxregulator: da9211: Use irq handler when readyNo scoreKernelLinuxnet/sched: act_mpls: Fix warning during failed attribute validationNo scoreKernelLinuxplatform/surface: aggregator: Add missing call to ssam_request_sync_free()No scoreKernelLinuxefi: fix NULL-deref in init error pathNo scoreKernelLinuxio_uring/io-wq: only free worker if it was allocated for creationNo scoreKernelLinuxio_uring: lock overflowing for IOPOLLNo scoreKernelLinuxBluetooth: hci_qca: Fix driver shutdown on closed serdevNo score- Show moreLoading…