CVE-2023-53062
published 2025-05-02CVE-2023-53062: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc95xx: Limit packet length to skb->len
Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < 733580e268a53db1cd01f2251419da91866378f6 | 733580e268a53db1cd01f2251419da91866378f6 |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < d3c145a4d24b752c9a1314d5a595014d51471418 | d3c145a4d24b752c9a1314d5a595014d51471418 |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < f2111c791d885211714db85f9a06188571c57dd0 | f2111c791d885211714db85f9a06188571c57dd0 |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < 33d1603a38e05886c538129ddfe00bd52d347e7b | 33d1603a38e05886c538129ddfe00bd52d347e7b |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < ba6c40227108f8ee428e42eb0337b48ed3001e65 | ba6c40227108f8ee428e42eb0337b48ed3001e65 |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < e041bef1adee02999cf24f9a2e15ed452bc363fe | e041bef1adee02999cf24f9a2e15ed452bc363fe |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < 70eb25c6a6cde149affe8a587371a3a8ad295ba0 | 70eb25c6a6cde149affe8a587371a3a8ad295ba0 |
| linux | linux | >= 2f7ca802bdae2ca41022618391c70c2876d92190 < ff821092cf02a70c2bccd2d19269f01e29aa52cf | ff821092cf02a70c2bccd2d19269f01e29aa52cf |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 2.6.28 < 4.14.312 | 4.14.312 |
| linux | linux_kernel | >= 4.15 < 4.19.280 | 4.19.280 |
| linux | linux_kernel | >= 4.20 < 5.4.240 | 5.4.240 |
| linux | linux_kernel | >= 5.11 < 5.15.105 | 5.15.105 |
| linux | linux_kernel | >= 5.16 < 6.1.22 | 6.1.22 |
| linux | linux_kernel | >= 5.5 < 5.10.177 | 5.10.177 |
| linux | linux_kernel | >= 6.2 < 6.2.9 | 6.2.9 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: usb: smsc95xx: Limit packet length to skb->len
vendor_redhat·2025-05-02·CVSS 5.5
CVE-2023-53062 [MEDIUM] kernel: net: usb: smsc95xx: Limit packet length to skb->len
kernel: net: usb: smsc95xx: Limit packet length to skb->len
In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc95xx: Limit packet length to skb->len
Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.
Statement: The patch fixes an information disclosure vulnerability in the smsc95xx USB Ethernet driver, where packet descriptors could specify a length greater than the actual buffer size (skb->len), potentially leaking uninitialized kernel memory.
This issue could be triggered by a malicious USB device, and the patch adds a strict bounds check before processing packets.
Local attacker with physical or USB device access can trigger
Debian
CVE-2023-53062: linux - In the Linux kernel, the following vulnerability has been resolved: net: usb: s...
vendor_debian·2023·CVSS 5.5
CVE-2023-53062 [MEDIUM] CVE-2023-53062: linux - In the Linux kernel, the following vulnerability has been resolved: net: usb: s...
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.
Scope: local
bookworm: resolved (fixed in 6.1.25-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.25-1)
sid: resolved (fixed in 6.1.25-1)
trixie: resolved (fixed in 6.1.25-1)
GHSA
GHSA-fp59-3qqx-4mp6: In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc95xx: Limit packet length to skb->len
Packet length retrieved from
ghsa_unreviewed·2025-05-02
CVE-2023-53062 [MEDIUM] CWE-401 GHSA-fp59-3qqx-4mp6: In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc95xx: Limit packet length to skb->len
Packet length retrieved from
In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc95xx: Limit packet length to skb->len
Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.
OSV
CVE-2023-53062: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from d
osv·2025-05-02·CVSS 5.5
CVE-2023-53062 [MEDIUM] CVE-2023-53062: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from d
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/33d1603a38e05886c538129ddfe00bd52d347e7bhttps://git.kernel.org/stable/c/70eb25c6a6cde149affe8a587371a3a8ad295ba0https://git.kernel.org/stable/c/733580e268a53db1cd01f2251419da91866378f6https://git.kernel.org/stable/c/ba6c40227108f8ee428e42eb0337b48ed3001e65https://git.kernel.org/stable/c/d3c145a4d24b752c9a1314d5a595014d51471418https://git.kernel.org/stable/c/e041bef1adee02999cf24f9a2e15ed452bc363fehttps://git.kernel.org/stable/c/f2111c791d885211714db85f9a06188571c57dd0https://git.kernel.org/stable/c/ff821092cf02a70c2bccd2d19269f01e29aa52cf
2025-05-02
Published