5.5

CVE-2023-53125

net: usb: smsc75xx: Limit packet length to skb->len

In the Linux kernel, the following vulnerability has been resolved:

net: usb: smsc75xx: Limit packet length to skb->len

Packet length retrieved from skb data may be larger than
the actual socket buffer length (up to 9026 bytes). In such
case the cloned skb passed up the network stack will leak
kernel memory contents.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.35 < 4.14.311
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.279
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.238
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.176
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.104
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.21
Linux ≫ Linux Kernel Version >= 6.2 < 6.2.8
Linux ≫ Linux Kernel Version 2.6.34 Update -
Linux ≫ Linux Kernel Version 2.6.34 Update rc2
Linux ≫ Linux Kernel Version 2.6.34 Update rc3
Linux ≫ Linux Kernel Version 2.6.34 Update rc4
Linux ≫ Linux Kernel Version 2.6.34 Update rc5
Linux ≫ Linux Kernel Version 2.6.34 Update rc6
Linux ≫ Linux Kernel Version 2.6.34 Update rc7
Linux ≫ Linux Kernel Version 6.3 Update rc1
Linux ≫ Linux Kernel Version 6.3 Update rc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.075
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/4a4de0a68b18485c68ab4f0cfa665b1633c6d277
Patch
https://git.kernel.org/stable/c/53966d572d056d6b234cfe76a5f9d60049d3c178
Patch
https://git.kernel.org/stable/c/9fabdd79051a9fe51388df099aff6e4b660fedd2
Patch
https://git.kernel.org/stable/c/e294f0aa47e4844f3d3c8766c02accd5a76a7d4e
Patch
https://git.kernel.org/stable/c/105db6574281e1e03fcbf87983f4fee111682306
Patch
https://git.kernel.org/stable/c/c7bdc137ca163b90917c1eeba4f1937684bd4f8b
Patch
https://git.kernel.org/stable/c/8ee5df9c039e37b9d8eb5e3de08bfb7f53d31cb6
Patch
https://git.kernel.org/stable/c/d8b228318935044dafe3a5bc07ee71a1f1424b8d
Patch