CVE-2023-53548 — Improper Input Validation in Linux

CWE-20 — Improper Input Validation5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 Modules linked in: CPU: 0 PID: 754 Comm: kworker/0:2 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0 Hardware name: Google Google Compute Engine/Goo…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel2.6.14 — 4.14.322+7
▶Debianlinux/linux_kernel< 5.10.191-1+3
▶CVEListV5linux/linux2e55cc7210fef90f88201e860d8767594974574e — a0715d04cf687a7e21f0d6ac8c1d479294a3f6f8+8
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53548: In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb The syzbot fuzzer ide↗2025-10-04
▶
GHSA
GHSA-3789-628f-hmx4: In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb The syzbot fuzzer i↗2025-10-04
▶

📋Vendor Advisories

2
Red Hat
kernel: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb↗2025-10-04
▶
Debian
CVE-2023-53548: linux - In the Linux kernel, the following vulnerability has been resolved: net: usbnet...↗2023
▶