NetSight
IP …
medium5.5

CVE-2023-53062

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.28 before 4.14.312
from 4.15 before 4.19.280
from 4.20 before 5.4.240
from 5.5 before 5.10.177
from 5.11 before 5.15.105
from 5.16 before 6.1.22

Weakness classification

CWE-401

References