CVE-2023-52528
published 2024-03-02CVE-2023-52528: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
13.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
syzbot reported the following uninit-value access issue:
BUG: KMSAN: uninit-value in smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline]
BUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482
CPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x21c/0x280 lib/dump_stack.c:118
kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121
__msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215
smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline]
smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482
usbnet_probe+0x1152/0x3f90 drivers/net/usb/usbnet.c:1737
usb_probe_interface+0xece/0x1550 drivers/usb/core/driver.c:374
really_probe+0xf20/0x20b0 drivers/base/dd.c:529
driver_probe_device+0x293/0x390 drivers/base/dd.c:701
__device_attach_driver+0x63f/0x830 drivers/base/dd.c:807
bus_for_each_drv+0x2ca/0x3f0 drivers/base/bus.c:431
__device_attach+0x4e2/0x7f0 drivers/base/dd.c:873
device_initial_probe+0x4a/0x60 drivers/base/dd.c:920
bus_probe_device+0x177/0x3d0 drivers/base/bus.c:491
device_add+0x3b0e/0x40d0 drivers/base/core.c:2680
usb_set_configuration+0x380f/0x3f10 drivers/usb/core/message.c:2032
usb_generic_driver_probe+0x138/0x300 drivers/usb/core/generic.c:241
usb_probe_device+0x311/0x490 drivers/usb/core/driver.c:272
really_probe+0xf20/0x20b0 drivers/base/dd.c:529
driver_probe_device+0x293/0x390 drivers/base/dd.c:701
__device_attach_driver+0x63f/0x830 drivers/base/dd.c:807
bus_for_each_drv+0x2ca/0x3f0 drivers/base/bus.c:431
__device_attach+0x4e2/0x7f0 drivers/base/dd.c:873
device_initial_probe+0x4a/0x60 drivers/base/dd.c:920
bus_probe_device+0x177/0x3d0 drivers/base/bus.c:491
device_add+0x3b0e/0x
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < 3e0af6eec1789fd11934164a7f4dbcad979855a4 | 3e0af6eec1789fd11934164a7f4dbcad979855a4 |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < 2a36d9e2995c8c3c3f179aab1215a69cff06cbed | 2a36d9e2995c8c3c3f179aab1215a69cff06cbed |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < 310f1c92f65ad905b7e81fe14de82d979ebbd825 | 310f1c92f65ad905b7e81fe14de82d979ebbd825 |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < 30bc4d7aebe33904b0f2d3aad4b4a9c6029ad0c5 | 30bc4d7aebe33904b0f2d3aad4b4a9c6029ad0c5 |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < cda10784a176d7192f08ecb518f777a4e9575812 | cda10784a176d7192f08ecb518f777a4e9575812 |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < 9ffc5018020fe646795a8dc1203224b8f776dc09 | 9ffc5018020fe646795a8dc1203224b8f776dc09 |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < 4931e80da9463b03bfe42be54a9a19f213b0f76d | 4931e80da9463b03bfe42be54a9a19f213b0f76d |
| linux | linux | >= d0cad871703b898a442e4049c532ec39168e5b57 < e9c65989920f7c28775ec4e0c11b483910fb67b8 | e9c65989920f7c28775ec4e0c11b483910fb67b8 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.5.8-1 | 6.5.8-1 |
| linux | linux_kernel | >= 0 < 6.5.8-1 | 6.5.8-1 |
| linux | linux_kernel | >= 0 < 4.4.0-260.294 | 4.4.0-260.294 |
| linux | linux_kernel | >= 0 < 4.15.0-230.242 | 4.15.0-230.242 |
| linux | linux_kernel | >= 2.6.34 < 4.14.327 | 4.14.327 |
| linux | linux_kernel | >= 4.15 < 4.19.296 | 4.19.296 |
| linux | linux_kernel | >= 4.20 < 5.4.258 | 5.4.258 |
| linux | linux_kernel | >= 5.11 < 5.15.135 | 5.15.135 |
| linux | linux_kernel | >= 5.16 < 6.1.57 | 6.1.57 |
| linux | linux_kernel | >= 5.5 < 5.10.198 | 5.10.198 |
| linux | linux_kernel | >= 6.2 < 6.5.7 | 6.5.7 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-11-14·CVSS 5.5
CVE-2024-42089 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- HW tracing;
- ISDN/mISDN subsystem;
- Media drivers;
- Network drivers;
- SCSI drivers;
- USB DSL drivers;
- VFIO drivers;
- Watchdog drivers;
- JFS file system;
- Amateur Radio drivers;
- IPv4 networking;
- IUCV driver;
- TIPC protocol;
- Integrity Measurement Architecture(IMA) framework;
- SoC Audio for Freescale CPUs drivers;
- USB sound devices;
(CVE-2024-42229, CVE-2024-27436, CVE-2024-42271, CVE-2024-46673,
CVE-2024-42284, CVE-2024-26810, CVE-2024-38602, CVE-2024-42280,
CVE-2024-4385
Ubuntu
Linux kernel (Azure) vulnerabilities
vendor_ubuntu·2024-10-17·CVSS 7.8
CVE-2024-38621 [HIGH] Linux kernel (Azure) vulnerabilities
Title: Linux kernel (Azure) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- Cryptographic API;
- CPU frequency scaling framework;
- HW tracing;
- ISDN/mISDN subsystem;
- Media drivers;
- Network drivers;
- NVME drivers;
- S/390 drivers;
- SCSI drivers;
- USB subsystem;
- VFIO drivers;
- Watchdog drivers;
- JFS file system;
- IRQ subsystem;
- Core kernel;
- Memory management;
- Amateur Radio drivers;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- Network traffic control;
- TIPC protocol;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) fra
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-10-15·CVSS 7.8
CVE-2024-38602 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- Cryptographic API;
- CPU frequency scaling framework;
- HW tracing;
- ISDN/mISDN subsystem;
- Media drivers;
- Network drivers;
- NVME drivers;
- S/390 drivers;
- SCSI drivers;
- USB subsystem;
- VFIO drivers;
- Watchdog drivers;
- JFS file system;
- IRQ subsystem;
- Core kernel;
- Memory management;
- Amateur Radio drivers;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- Network traffic control;
- TIPC protocol;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) framework;
Red Hat
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
vendor_redhat·2024-03-02·CVSS 5.5
CVE-2023-52528 [MEDIUM] CWE-252 kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
syzbot reported the following uninit-value access issue:
BUG: KMSAN: uninit-value in smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline]
BUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482
CPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x21c/0x280 lib/dump_stack.c:118
kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121
__msan_warning+
Debian
CVE-2023-52528: linux - In the Linux kernel, the following vulnerability has been resolved: net: usb: s...
vendor_debian·2023·CVSS 5.5
CVE-2023-52528 [MEDIUM] CVE-2023-52528: linux - In the Linux kernel, the following vulnerability has been resolved: net: usb: s...
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline] BUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482 CPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x21c/0x280 lib/dump_stack.c:118 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121 __msan_warning+0x58/0xa0 mm/kmsan/kms
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2024-11-14·CVSS 5.5
[MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- HW tracing;
- ISDN/mISDN subsystem;
- Media drivers;
- Network drivers;
- SCSI drivers;
- USB DSL drivers;
- VFIO drivers;
- Watchdog drivers;
- JFS file system;
- Amateur Radio drivers;
- IPv4 networking;
- IUCV driver;
- TIPC protocol;
- Integrity Measurement Architecture(IMA) framework;
- SoC Audio for Freescale CPUs drivers;
- USB sound devices;
(CVE-2024-42229, CVE-2024-27436, CVE-2024-42271, CVE-2024-46673,
CVE-2024-42284, CVE-2024-26810, CVE-2024-38602, CVE-2024-42280,
CVE-2024-43858, CVE-2024-42089, CVE-2024-44940, CVE-2
OSV
linux-azure vulnerabilities
osv·2024-10-17·CVSS 7.8
[HIGH] linux-azure vulnerabilities
linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- Cryptographic API;
- CPU frequency scaling framework;
- HW tracing;
- ISDN/mISDN subsystem;
- Media drivers;
- Network drivers;
- NVME drivers;
- S/390 drivers;
- SCSI drivers;
- USB subsystem;
- VFIO drivers;
- Watchdog drivers;
- JFS file system;
- IRQ subsystem;
- Core kernel;
- Memory management;
- Amateur Radio drivers;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- Network traffic control;
- TIPC protocol;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) framework;
- SoC Audio for Freescale CPUs drivers;
- USB sound devices;
(CVE-2024-369
OSV
linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
osv·2024-10-15·CVSS 7.8
[HIGH] linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- Cryptographic API;
- CPU frequency scaling framework;
- HW tracing;
- ISDN/mISDN subsystem;
- Media drivers;
- Network drivers;
- NVME drivers;
- S/390 drivers;
- SCSI drivers;
- USB subsystem;
- VFIO drivers;
- Watchdog drivers;
- JFS file system;
- IRQ subsystem;
- Core kernel;
- Memory management;
- Amateur Radio drivers;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- Network traffic control;
- TIPC protocol;
- XFRM subsystem;
- Integrity Measurement Ar
GHSA
GHSA-h234-f9wp-jpmr: In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
syzbot report
ghsa_unreviewed·2024-03-03
CVE-2023-52528 [MEDIUM] CWE-908 GHSA-h234-f9wp-jpmr: In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
syzbot report
In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
syzbot reported the following uninit-value access issue:
BUG: KMSAN: uninit-value in smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline]
BUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482
CPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x21c/0x280 lib/dump_stack.c:118
kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121
__msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215
smsc75xx_wait_ready drivers/net/usb/
OSV
CVE-2023-52528: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported
osv·2024-03-02·CVSS 5.5
CVE-2023-52528 [MEDIUM] CVE-2023-52528: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline] BUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482 CPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x21c/0x280 lib/dump_stack.c:118 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121 __msan_warning+0x58/0xa0 mm/kmsan/kms
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2a36d9e2995c8c3c3f179aab1215a69cff06cbedhttps://git.kernel.org/stable/c/30bc4d7aebe33904b0f2d3aad4b4a9c6029ad0c5https://git.kernel.org/stable/c/310f1c92f65ad905b7e81fe14de82d979ebbd825https://git.kernel.org/stable/c/3e0af6eec1789fd11934164a7f4dbcad979855a4https://git.kernel.org/stable/c/4931e80da9463b03bfe42be54a9a19f213b0f76dhttps://git.kernel.org/stable/c/9ffc5018020fe646795a8dc1203224b8f776dc09https://git.kernel.org/stable/c/cda10784a176d7192f08ecb518f777a4e9575812https://git.kernel.org/stable/c/e9c65989920f7c28775ec4e0c11b483910fb67b8https://git.kernel.org/stable/c/2a36d9e2995c8c3c3f179aab1215a69cff06cbedhttps://git.kernel.org/stable/c/30bc4d7aebe33904b0f2d3aad4b4a9c6029ad0c5https://git.kernel.org/stable/c/310f1c92f65ad905b7e81fe14de82d979ebbd825https://git.kernel.org/stable/c/3e0af6eec1789fd11934164a7f4dbcad979855a4https://git.kernel.org/stable/c/4931e80da9463b03bfe42be54a9a19f213b0f76dhttps://git.kernel.org/stable/c/9ffc5018020fe646795a8dc1203224b8f776dc09https://git.kernel.org/stable/c/cda10784a176d7192f08ecb518f777a4e9575812https://git.kernel.org/stable/c/e9c65989920f7c28775ec4e0c11b483910fb67b8
2024-03-02
Published