CVE-2023-53138

In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbldevicenotify syzbot reported use-after-free in cfusbldevicenotify 1. This causes a stack trace like below: BUG: KASAN: use-after-free in cfusbldevicenotify+0x7c9/0x870 net/caif/caifusb.c:138...

CVE-2023-53137

Removed by vendor...

CVE-2023-53136

In the Linux kernel, the following vulnerability has been resolved: afunix: fix struct pid leaks in OOB support syzbot reported struct pid leak 1. Issue is that queueoob calls maybeaddcreds which potentially holds a reference on a pid. But skb-destructor is not set either directly or by calling...

CVE-2023-53135

The CVE-2023-53135 entry describes a Linux kernel vulnerability in riscv where, if CONFIG_FRAME_POINTER is unset, the stack unwinding function walk_stackframe may read the stack non-atomically in imprecise unwinding mode, enabling a KASAN-detected stack-out-of-bounds condition. The identified fix...

CVE-2023-53134 bnxt_en: Avoid order-5 memory allocation for TPA data

In the Linux kernel, the following vulnerability has been resolved: bnxten: Avoid order-5 memory allocation for TPA data The driver needs to keep track of all the possible concurrent TPA GRO/LRO completions on the aggregation ring. On P5 chips, the maximum number of concurrent TPA is 256 and the...

CVE-2023-53132 scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove()

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix mpi3mrhbaport memory leak in mpi3mrremove Free mpi3mrhbaport at .remove...

CVE-2023-53133

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an infinite loop error when len is 0 in tcpbpfrecvmsgparser When the buffer length of the recvmsg system call is 0, we got the flollowing soft lockup problem: watchdog: BUG: soft lockup - CPU3 stuck for 27s!...

CVE-2023-53131

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthreadstop may prevent the threadfn from ever getting called. If that happens the svcrqst will not be cleaned up...

CVE-2023-53131 SUNRPC: Fix a server shutdown leak

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthreadstop may prevent the threadfn from ever getting called. If that happens the svcrqst will not be cleaned up...

CVE-2023-53130

Removed by vendor...

CVE-2023-53128

CVE-2023-53128 affects the Linux kernel via a memory-leak in the SCSI mpi3mr driver (throttle_groups). The issue is resolved by adding a missing kfree(), as documented in multiple sources (Linux kernel patch notes and related advisories). The provided materials do not specify affected kernel vers...

CVE-2023-53127

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mrremove Add a missing resource clean up in .remove...

CVE-2023-53127

In CVE-2023-53127, the Linux kernel SCSI MPI3MR driver had a leak in the mpi3mr_remove() cleanup path (expander node leak) due to a missing resource cleanup. The fix adds the missing cleanup in .remove(), mitigating an information/resource leak with a Local attack vector and, per the NVD entry, a...

CVE-2023-53127 scsi: mpi3mr: Fix expander node leak in mpi3mr_remove()

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mrremove Add a missing resource clean up in .remove...

CVE-2023-53126

The CVE-2023-53126 entry concerns the Linux kernel mpi3mr SCSI driver: a memory leak in sas_hba.phy within mpi3mr_remove() is fixed, specifically freeing mrioc->sas_hba.phy at .remove. The vulnerability affects the kernel's SCSI MPI3MR path and was addressed by the fix; no exploit details are ...

CVE-2023-53126 scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sashba.phy memory leak in mpi3mrremove Free mrioc-sashba.phy at .remove...

CVE-2023-53125

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb-len Packet length retrieved from skb data may be larger than the actual socket buffer length up to 9026 bytes. In such case the cloned skb passed up the network stack will leak kerne...

CVE-2023-53124

VULNERABILITY SUMMARY: CVE-2023-53124 fixes a NULL pointer dereference in the Linux kernel SCSI driver mpt3sas during transport_port_add. The port is created by sas_port_alloc_num() and rphy by sas_end_device_alloc() or sas_expander_alloc(), any of which may return NULL, and the code would access...

CVE-2023-53124

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sastransportportadd Port is allocated by sasportallocnum and rphy is allocated by either sasenddevicealloc or sasexpanderalloc, all of which may return NULL. So we need to check the...

CVE-2023-53123

In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug On s390 PCI functions may be hotplugged individually even when they belong to a multi-function device. In particular on an SR-IOV device VFs may be removed...