CVE-2023-53062

net: usb: smsc95xx: Limit packet length to skb->len

State: Published
Severity: Not scored
Published: May 2, 2025
Updated: May 11, 2026
Reserved: May 2, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: usb: smsc95xx: Limit packet length to skb->len

Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2f7ca802bdae2ca41022618391c70c2876d92190 to before 733580e268a53db1cd01f2251419da91866378f6Affected 2f7ca802bdae2ca41022618391c70c2876d92190 to before d3c145a4d24b752c9a1314d5a595014d51471418Affected 2f7ca802bdae2ca41022618391c70c2876d92190 to before f2111c791d885211714db85f9a06188571c57dd0Affected 2f7ca802bdae2ca41022618391c70c2876d92190 to before 33d1603a38e05886c538129ddfe00bd52d347e7bAffected 2f7ca802bdae2ca41022618391c70c2876d92190 to before ba6c40227108f8ee428e42eb0337b48ed3001e65Affected 2f7ca802bdae2ca41022618391c70c2876d92190 to before e041bef1adee02999cf24f9a2e15ed452bc363feAffected 2f7ca802bdae2ca41022618391c70c2876d92190 to before 70eb25c6a6cde149affe8a587371a3a8ad295ba0Affected 2f7ca802bdae2ca41022618391c70c2876d92190 to before ff821092cf02a70c2bccd2d19269f01e29aa52cfAffected
LinuxLinux	2.6.28Affected before 2.6.28Not affected 4.14.312 through 4.14.Not affected 4.19.280 through 4.19.Not affected 5.4.240 through 5.4.Not affected 5.10.177 through 5.10.Not affected 5.15.105 through 5.15.Not affected 6.1.22 through 6.1.Not affected 6.2.9 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

2f7ca802bdae2ca41022618391c70c2876d92190 to before 733580e268a53db1cd01f2251419da91866378f6Affected
2f7ca802bdae2ca41022618391c70c2876d92190 to before d3c145a4d24b752c9a1314d5a595014d51471418Affected
2f7ca802bdae2ca41022618391c70c2876d92190 to before f2111c791d885211714db85f9a06188571c57dd0Affected
2f7ca802bdae2ca41022618391c70c2876d92190 to before 33d1603a38e05886c538129ddfe00bd52d347e7bAffected
2f7ca802bdae2ca41022618391c70c2876d92190 to before ba6c40227108f8ee428e42eb0337b48ed3001e65Affected
2f7ca802bdae2ca41022618391c70c2876d92190 to before e041bef1adee02999cf24f9a2e15ed452bc363feAffected
2f7ca802bdae2ca41022618391c70c2876d92190 to before 70eb25c6a6cde149affe8a587371a3a8ad295ba0Affected
2f7ca802bdae2ca41022618391c70c2876d92190 to before ff821092cf02a70c2bccd2d19269f01e29aa52cfAffected

LinuxLinux

2.6.28Affected
before 2.6.28Not affected
4.14.312 through 4.14.*Not affected
4.19.280 through 4.19.*Not affected
5.4.240 through 5.4.*Not affected
5.10.177 through 5.10.*Not affected
5.15.105 through 5.15.*Not affected
6.1.22 through 6.1.*Not affected
6.2.9 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.