5.5
CVE-2023-53062
- EPSS 0.17%
- Veröffentlicht 02.05.2025 15:55:16
- Zuletzt bearbeitet 07.11.2025 02:23:30
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
net: usb: smsc95xx: Limit packet length to skb->len
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.28 < 4.14.312
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.280
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.240
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.177
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.105
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.22
Linux ≫ Linux Kernel Version >= 6.2 < 6.2.9
Linux ≫ Linux Kernel Version6.3 Updaterc1
Linux ≫ Linux Kernel Version6.3 Updaterc2
Linux ≫ Linux Kernel Version6.3 Updaterc3
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.062 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
https://git.kernel.org/stable/c/733580e268a53db1cd01f2251419da91866378f6
https://git.kernel.org/stable/c/d3c145a4d24b752c9a1314d5a595014d51471418
https://git.kernel.org/stable/c/f2111c791d885211714db85f9a06188571c57dd0
https://git.kernel.org/stable/c/33d1603a38e05886c538129ddfe00bd52d347e7b
https://git.kernel.org/stable/c/ba6c40227108f8ee428e42eb0337b48ed3001e65
https://git.kernel.org/stable/c/e041bef1adee02999cf24f9a2e15ed452bc363fe
https://git.kernel.org/stable/c/70eb25c6a6cde149affe8a587371a3a8ad295ba0
https://git.kernel.org/stable/c/ff821092cf02a70c2bccd2d19269f01e29aa52cf