CVE-2023-53140 – “Linux Kernel SCSI Core /proc/scsi Directory Removal Vulnerability”
The following table lists the changes that have been made to the CVE-2023-53140 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 02, 2025 Action […]
CVE-2023-53132 – “Mellanox MPI3MR Linux Kernel Memory Leak”
The following table lists the changes that have been made to the CVE-2023-53132 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 02, 2025 Action […]
CVE-2023-53133 – Apache Linux bpf Infinite Loop Vulnerability
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() When the buffer length of the recvmsg system call is 0, we got the flollowing soft lockup problem: watchdog: BUG: soft lockup – CPU#3 stuck for 27s! [a.out:6149] CPU: 3 PID: 6149 […]
CVE-2023-53131 – SunRPC Thread Shutdown Leak
The following table lists the changes that have been made to the CVE-2023-53131 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 02, 2025 Action […]
CVE-2023-53139 – Linux Kernel NFC fdp Null Pointer Dereference
The following table lists the changes that have been made to the CVE-2023-53139 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 02, 2025 Action […]
CVE-2023-53138 – Cisco CAIF Use-After-Free Vulnerability
In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbl_device_notify() syzbot reported use-after-free in cfusbl_device_notify() [1]. This causes a stack trace like below: BUG: KASAN: use-after-free in cfusbl_device_notify+0x7c9/0x870 net/caif/caif_usb.c:138 Read of size 8 at addr ffff88807ac4e6f0 by task kworker/u4:6/1214 CPU: 0 PID: 1214 Comm: kworker/u4:6 Not tainted 5.19.0-rc3-syzkaller-00146-g92f20ff72066 #0 […]
CVE-2023-53137 – Linux Kernel Ext4 Directory Corruption Vulnerability
The following table lists the changes that have been made to the CVE-2023-53137 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 02, 2025 Action […]
CVE-2023-53135 – Riscv Linux Kernel Stack Out-of-Bounds Vulnerability
In the Linux kernel, the following vulnerability has been resolved: riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode When CONFIG_FRAME_POINTER is unset, the stack unwinding function walk_stackframe randomly reads the stack and then, when KASAN is enabled, it can lead to the following backtrace: [ 0.000000] ================================================================== [ 0.000000] BUG: KASAN: stack-out-of-bounds in walk_stackframe+0xa6/0x11a [ […]
CVE-2023-53134 – “Broadcom bnxt_en Linux kernel Memory Allocation Vulnerability”
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Avoid order-5 memory allocation for TPA data The driver needs to keep track of all the possible concurrent TPA (GRO/LRO) completions on the aggregation ring. On P5 chips, the maximum number of concurrent TPA is 256 and the amount of memory we allocate is […]
CVE-2023-53130 – Linux Kernel Block Device Exclusivity Leak
In the Linux kernel, the following vulnerability has been resolved: block: fix wrong mode for blkdev_put() from disk_scan_partitions() If disk_scan_partitions() is called with ‘FMODE_EXCL’, blkdev_get_by_dev() will be called without ‘FMODE_EXCL’, however, follow blkdev_put() is still called with ‘FMODE_EXCL’, which will cause ‘bd_holders’ counter to leak. Fix the problem by using the right mode for blkdev_put().