Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53125

net: usb: smsc75xx: Limit packet length to skb->len

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d0cad871703b898a442e4049c532ec39168e5b57 to < 4a4de0a68b18485c68ab4f0cfa665b1633c6d277affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 53966d572d056d6b234cfe76a5f9d60049d3c178affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 9fabdd79051a9fe51388df099aff6e4b660fedd2affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < e294f0aa47e4844f3d3c8766c02accd5a76a7d4eaffected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 105db6574281e1e03fcbf87983f4fee111682306affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < c7bdc137ca163b90917c1eeba4f1937684bd4f8baffected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 8ee5df9c039e37b9d8eb5e3de08bfb7f53d31cb6affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < d8b228318935044dafe3a5bc07ee71a1f1424b8daffected

Linux Linux

Default version status: affected

  • 2.6.34affected
  • 0 to < 2.6.34unaffected
  • 4.14.311 to ≤ 4.14.*unaffected
  • 4.19.279 to ≤ 4.19.*unaffected
  • 5.4.238 to ≤ 5.4.*unaffected
  • 5.10.176 to ≤ 5.10.*unaffected
  • 5.15.104 to ≤ 5.15.*unaffected
  • 6.1.21 to ≤ 6.1.*unaffected
  • 6.2.8 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References