5.5

CVE-2023-53062

net: usb: smsc95xx: Limit packet length to skb->len

In the Linux kernel, the following vulnerability has been resolved:

net: usb: smsc95xx: Limit packet length to skb->len

Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 2.6.28 < 4.14.312
LinuxLinux Kernel Version >= 4.15 < 4.19.280
LinuxLinux Kernel Version >= 4.20 < 5.4.240
LinuxLinux Kernel Version >= 5.5 < 5.10.177
LinuxLinux Kernel Version >= 5.11 < 5.15.105
LinuxLinux Kernel Version >= 5.16 < 6.1.22
LinuxLinux Kernel Version >= 6.2 < 6.2.9
LinuxLinux Kernel Version6.3 Updaterc1
LinuxLinux Kernel Version6.3 Updaterc2
LinuxLinux Kernel Version6.3 Updaterc3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.062
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/733580e268a53db1cd01f2251419da91866378f6
Patch
https://git.kernel.org/stable/c/d3c145a4d24b752c9a1314d5a595014d51471418
Patch
https://git.kernel.org/stable/c/f2111c791d885211714db85f9a06188571c57dd0
Patch
https://git.kernel.org/stable/c/33d1603a38e05886c538129ddfe00bd52d347e7b
Patch
https://git.kernel.org/stable/c/ba6c40227108f8ee428e42eb0337b48ed3001e65
Patch
https://git.kernel.org/stable/c/e041bef1adee02999cf24f9a2e15ed452bc363fe
Patch
https://git.kernel.org/stable/c/70eb25c6a6cde149affe8a587371a3a8ad295ba0
Patch
https://git.kernel.org/stable/c/ff821092cf02a70c2bccd2d19269f01e29aa52cf
Patch