5.5
CVE-2023-53125
- EPSS 0.16%
- Veröffentlicht 02.05.2025 15:56:01
- Zuletzt bearbeitet 10.11.2025 17:46:06
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
net: usb: smsc75xx: Limit packet length to skb->len
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.35 < 4.14.311
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.279
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.238
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.176
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.104
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.21
Linux ≫ Linux Kernel Version >= 6.2 < 6.2.8
Linux ≫ Linux Kernel Version2.6.34 Update-
Linux ≫ Linux Kernel Version2.6.34 Updaterc2
Linux ≫ Linux Kernel Version2.6.34 Updaterc3
Linux ≫ Linux Kernel Version2.6.34 Updaterc4
Linux ≫ Linux Kernel Version2.6.34 Updaterc5
Linux ≫ Linux Kernel Version2.6.34 Updaterc6
Linux ≫ Linux Kernel Version2.6.34 Updaterc7
Linux ≫ Linux Kernel Version6.3 Updaterc1
Linux ≫ Linux Kernel Version6.3 Updaterc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.052 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
https://git.kernel.org/stable/c/4a4de0a68b18485c68ab4f0cfa665b1633c6d277
https://git.kernel.org/stable/c/53966d572d056d6b234cfe76a5f9d60049d3c178
https://git.kernel.org/stable/c/9fabdd79051a9fe51388df099aff6e4b660fedd2
https://git.kernel.org/stable/c/e294f0aa47e4844f3d3c8766c02accd5a76a7d4e
https://git.kernel.org/stable/c/105db6574281e1e03fcbf87983f4fee111682306
https://git.kernel.org/stable/c/c7bdc137ca163b90917c1eeba4f1937684bd4f8b
https://git.kernel.org/stable/c/8ee5df9c039e37b9d8eb5e3de08bfb7f53d31cb6
https://git.kernel.org/stable/c/d8b228318935044dafe3a5bc07ee71a1f1424b8d