CVE-2023-53068
published 2025-05-02CVE-2023-53068: In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descriptor…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Limit packet length to skb->len
Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.
Additionally prevent integer underflow when size is less than
ETH_FCS_LEN.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 55d7de9de6c30adce8d675c7ce513e283829c2ff < 83de34967473ed31d276381373713cc2869a42e5 | 83de34967473ed31d276381373713cc2869a42e5 |
| linux | linux | >= 55d7de9de6c30adce8d675c7ce513e283829c2ff < 44b9ed73369fc5ec85dd2ee487e986301792a82d | 44b9ed73369fc5ec85dd2ee487e986301792a82d |
| linux | linux | >= 55d7de9de6c30adce8d675c7ce513e283829c2ff < 7f247f5a2c18b3f21206cdd51193df4f38e1b9f5 | 7f247f5a2c18b3f21206cdd51193df4f38e1b9f5 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 4.3 < 6.1.22 | 6.1.22 |
| linux | linux_kernel | >= 6.2 < 6.2.9 | 6.2.9 |
| msrc | cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_kernel_5.15.200.1-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_kernel_5.15.202.1-1_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
net: usb: lan78xx: Limit packet length to skb->len
vendor_msrc·2025-05-13·CVSS 5.5
CVE-2023-53068 [MEDIUM] CWE-401 net: usb: lan78xx: Limit packet length to skb->len
net: usb: lan78xx: Limit packet length to skb->len
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Red Hat
kernel: net: usb: lan78xx: Limit packet length to skb->len
vendor_redhat·2025-05-02·CVSS 5.5
CVE-2023-53068 [MEDIUM] kernel: net: usb: lan78xx: Limit packet length to skb->len
kernel: net: usb: lan78xx: Limit packet length to skb->len
In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Limit packet length to skb->len
Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.
Additionally prevent integer underflow when size is less than
ETH_FCS_LEN.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 8
Debian
CVE-2023-53068: linux - In the Linux kernel, the following vulnerability has been resolved: net: usb: l...
vendor_debian·2023·CVSS 5.5
CVE-2023-53068 [MEDIUM] CVE-2023-53068: linux - In the Linux kernel, the following vulnerability has been resolved: net: usb: l...
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents. Additionally prevent integer underflow when size is less than ETH_FCS_LEN.
Scope: local
bookworm: resolved (fixed in 6.1.25-1)
bullseye: open
forky: resolved (fixed in 6.1.25-1)
sid: resolved (fixed in 6.1.25-1)
trixie: resolved (fixed in 6.1.25-1)
OSV
CVE-2023-53068: In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from de
osv·2025-05-02·CVSS 5.5
CVE-2023-53068 [MEDIUM] CVE-2023-53068: In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from de
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents. Additionally prevent integer underflow when size is less than ETH_FCS_LEN.
GHSA
GHSA-rhwj-4j44-629j: In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Limit packet length to skb->len
Packet length retrieved from
ghsa_unreviewed·2025-05-02
CVE-2023-53068 [MEDIUM] CWE-401 GHSA-rhwj-4j44-629j: In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Limit packet length to skb->len
Packet length retrieved from
In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Limit packet length to skb->len
Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.
Additionally prevent integer underflow when size is less than
ETH_FCS_LEN.
No detection rules found.
No public exploits indexed.
2025-05-02
Published