Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53062

net: usb: smsc95xx: Limit packet length to skb->len

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < 733580e268a53db1cd01f2251419da91866378f6affected
  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < d3c145a4d24b752c9a1314d5a595014d51471418affected
  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < f2111c791d885211714db85f9a06188571c57dd0affected
  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < 33d1603a38e05886c538129ddfe00bd52d347e7baffected
  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < ba6c40227108f8ee428e42eb0337b48ed3001e65affected
  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < e041bef1adee02999cf24f9a2e15ed452bc363feaffected
  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < 70eb25c6a6cde149affe8a587371a3a8ad295ba0affected
  • 2f7ca802bdae2ca41022618391c70c2876d92190 to < ff821092cf02a70c2bccd2d19269f01e29aa52cfaffected

Linux Linux

Default version status: affected

  • 2.6.28affected
  • 0 to < 2.6.28unaffected
  • 4.14.312 to ≤ 4.14.*unaffected
  • 4.19.280 to ≤ 4.19.*unaffected
  • 5.4.240 to ≤ 5.4.*unaffected
  • 5.10.177 to ≤ 5.10.*unaffected
  • 5.15.105 to ≤ 5.15.*unaffected
  • 6.1.22 to ≤ 6.1.*unaffected
  • 6.2.9 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References