CVE-2023-52821

CVE-2023-52821 affects the Linux kernel’s DRM panel code. In versatile_panel_get_modes(), the return value of drm_mode_duplicate() can be NULL on failure and is not checked, causing a NULL pointer dereference. The fix adds a check to prevent NP dereference. The vulnerability is local and may cras...

CVE-2023-52819

CVE-2023-52819 is resolved in the Linux kernel. The vulnerability was in drm/amd where UBSAN reported an array-index-out-of-bounds for Polaris/Tonga in pptable structs using flexible array sizes; the fix switches to using flexible arrays to avoid out-of-bounds access. Impact is local (CVSS: AV:L,...

CVE-2023-52814

CVE-2023-52814 : Linux kernel has fixed a potential NULL pointer dereference in the AMDGPU driver. The function amdgpu_ras_get_context may return NULL if the device does not support ras, and the code now checks for NULL before dereferencing. This (local) vulnerability could crash the kernel if NU...

CVE-2023-52812

CVE-2023-52812 affects the Linux kernel in the DRM/AMD path for updating PCIe parameters in SR-IOV environments. The root cause is that pcie_table->num_of_link_levels can be 0, making num_of_levels − 1 evaluate to an invalid index and potentially causing an out-of-bounds access. The vulnerabil...

CVE-2023-52810

CVE-2023-52810 refers to a Linux kernel issue in fs/jfs where l2nbperpage could become negative, causing a shift-out-of-bounds UBSAN failure in jfs_dmap.c. Reports indicate UBSAN: shift-out-of-bounds with shift exponent -16777216 and that the fix adds a validity check for negative db_l2nbperpage ...

CVE-2023-52807

CVE-2023-52807 affects the Linux kernel net/hns3 driver. The vulnerability arises from an array of strings used to display coalesce info, which may allow out-of-bounds reads when the kernel adds a new mode or state and coalesce info is read via debugfs. A patch fixes the bound-checking/array sizi...

CVE-2023-52805

CVE-2023-52805 affects the Linux kernel/JFS inode allocation. The issue is an array-index-out-of-bounds in diAlloc caused by lack of validation of the iag’s agno during new inode allocation, which could lead to fragmentation. A fix was added to perform the necessary check, and multiple connected ...

CVE-2023-52804

CVE-2023-52804 affects the Linux kernel (fs/jfs) where db_maxag and db_agpref were used as indexes into db_agfree without validity checks. This could trigger an array-index-out-of-bounds UB in fs/jfs/jfs_dmap.c:639:20 (index 7936 out of range for atomic_t[128]). The issue has been addressed by ad...

CVE-2023-52802

CVE-2023-52802 is rejected/not used; this entry does not reflect an active vulnerability.

CVE-2023-52801

CVE-2023-52801 concerns the Linux kernel iommufd code. In iopt_area_split(), if the original iopt_area had filled a domain and is linked to domains_itree, pages_nodes must be reintegrated; otherwise domains_itree becomes corrupted and leads to use-after-free. The vulnerability is resolved by ensu...

CVE-2023-52795

Summary: CVE-2023-52795 affects the Linux kernel vhost-vdpa path. The vulnerability is a use-after-free/double-free in vhost_vdpa_probe() caused by put_device() calling vhost_vdpa_release_dev() which frees a device via ida_simple_remove(). This was resolved in the Linux kernel; the Astra Linux ad...

CVE-2023-52794

CVE-2023-52794 is a Linux kernel vulnerability in the intel_powerclamp implementation under thermal: intel: powerclamp, where a mismatch between param_get_int and the max_idle definition can trigger a global out-of-bounds read (KASAN report). The bug stems from reading a 32-bit int where a smalle...

CVE-2023-52790

The CVE-2023-52790 issue affects the Linux kernel swiotlb when CONFIG_SWIOTLB_DYNAMIC is enabled. The root cause is an out-of-bounds allocation on the free list for IO TLB slots, where swiotlb_area_find_slots() could allocate slots beyond a transient IO TLB buffer. The fix limits the free list le...

CVE-2023-52788

The CVE-2023-52788 entry describes a Linux kernel issue in the i915/perf interface where dereferencing the perf interface when it is not available could lead to a NULL dereference. The fix returns -ENOTSUPP when the perf interface is unavailable. This is the only explicit vulnerability detail pro...

CVE-2023-52781

CVE-2023-52781 concerns the Linux kernel USB config BOS descriptor handling. In usb_get_bos_descriptor(), an iteration issue occurs when skipping USB_DT_DEVICE_CAPABILITY, causing the same descriptor to be read repeatedly. The fix introduces a goto to advance the pointer and bytes read so the fun...

CVE-2023-52778

CVE-2023-52778 affects the Linux kernel’s MPTCP implementation. The root cause is a commit that allowed TCP sockets and MPTCP subflows to build egress packets larger than 64K, exceeding the DSS data size and causing misrepresentation on the wire and stream corruption. The issue manifests as large...

CVE-2023-52776

The CVE-2023-52776 issue affects the Linux kernel’s wifi/ath12k path. The DFS-radar and temperature event handling code calling ath12k_mac_get_ar_by_pdev_id() was not marked as an RCU read-side critical section, risking use-after-free in active pdev contexts. The fix marks the implicated code as ...

CVE-2023-52775

CVE-2023-52775 is a Linux kernel vulnerability affecting net/smc where a Decline message could cross or collide in SMC-R, causing data corruption during Redis/SRC testing. A patch doubles the client timeout to 2x the server value to prevent cross‑timeout conflicts; remediation is upgrading to a k...

CVE-2023-52774

CVE-2023-52774 : In the Linux kernel (s390/dasd), the device queue could be accessed concurrently in dasd_profile_start(), allowing the queue to change while it is being read; this could trigger a kernel panic due to invalid pointer accesses when I/O is highly parallel (aliases). The root cause i...

CVE-2023-52770

CVE-2023-52770 is a Linux-kernel (f2fs) issue: the bug stems from how extent_cache is allocated, with a split between initial and dynamic conditions that could trigger a panic during extent_cache updates (observed during a file creation with compressed flag and subsequent operations). The vulnera...