VulnerabilityAnalyzed
CVE-2023-53062
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length.
MEDIUM 5.5EPSS 0.19%
Does this matter?
Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.19% probability · 9th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/33d1603a38e05886c538129ddfe00bd52d347e7bPatch
- https://git.kernel.org/stable/c/70eb25c6a6cde149affe8a587371a3a8ad295ba0Patch
- https://git.kernel.org/stable/c/733580e268a53db1cd01f2251419da91866378f6Patch
- https://git.kernel.org/stable/c/ba6c40227108f8ee428e42eb0337b48ed3001e65Patch
- https://git.kernel.org/stable/c/d3c145a4d24b752c9a1314d5a595014d51471418Patch
- https://git.kernel.org/stable/c/e041bef1adee02999cf24f9a2e15ed452bc363fePatch
- https://git.kernel.org/stable/c/f2111c791d885211714db85f9a06188571c57dd0Patch
- https://git.kernel.org/stable/c/ff821092cf02a70c2bccd2d19269f01e29aa52cfPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.