CVE-2023-53068

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53068
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents. Additionally prevent integer underflow when size is less than ETH_FCS_LEN.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/44b9ed73369fc5ec85dd2ee487e986301792a82d Patch
https://git.kernel.org/stable/c/7f247f5a2c18b3f21206cdd51193df4f38e1b9f5 Patch
https://git.kernel.org/stable/c/83de34967473ed31d276381373713cc2869a42e5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
History

12 Nov 2025, 20:51

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/44b9ed73369fc5ec85dd2ee487e986301792a82d - () https://git.kernel.org/stable/c/44b9ed73369fc5ec85dd2ee487e986301792a82d - Patch
References () https://git.kernel.org/stable/c/7f247f5a2c18b3f21206cdd51193df4f38e1b9f5 - () https://git.kernel.org/stable/c/7f247f5a2c18b3f21206cdd51193df4f38e1b9f5 - Patch
References () https://git.kernel.org/stable/c/83de34967473ed31d276381373713cc2869a42e5 - () https://git.kernel.org/stable/c/83de34967473ed31d276381373713cc2869a42e5 - Patch

05 May 2025, 20:54

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: usb: lan78xx: Limitar la longitud del paquete a skb->len. La longitud del paquete obtenida del descriptor puede ser mayor que la longitud real del búfer del socket. En tal caso, el skb clonado que se pasa a la pila de red filtrará el contenido de la memoria del kernel. Además, se evita el subdesbordamiento de enteros cuando el tamaño es menor que ETH_FCS_LEN.

02 May 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-02 16:15

Updated : 2025-11-12 20:51

NVD link : CVE-2023-53068

Mitre link : CVE-2023-53068

CVE.ORG link : CVE-2023-53068

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime