Chromium: CVE-2023-1220 Heap buffer overflow in UMA

Chromium: CVE-2023-1219 Heap buffer overflow in Metrics

Chromium: CVE-2023-1218 Use after free in WebRTC

Chromium: CVE-2023-1217 Stack buffer overflow in Crash reporting

Chromium: CVE-2023-1216 Use after free in DevTools

Chromium: CVE-2023-1215 Type Confusion in CSS

Chromium: CVE-2023-1214 Type Confusion in V8

Chromium: CVE-2023-1213 Use after free in Swiftshader

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.

A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL leading to an invalid pointer request.

Use-after-free in parse_lease_state()

Use-after-free in setup_async_work()

Use-after-free in smb2_is_status_io_timeout()

Incorrect Calculation of Buffer Size in vim/vim

Heap-based Buffer Overflow in vim/vim

Divide By Zero in vim/vim

A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.

A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012 but in asus devices the work_struct may be scheduled by the LED controller while the device is disconnecting triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.

CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability