Riskcovery

CVE-2023-53068

net: usb: lan78xx: Limit packet length to skb->len

State
Published
Severity
Not scored
Published
May 2, 2025
Updated
May 11, 2026
Reserved
May 2, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: usb: lan78xx: Limit packet length to skb->len

Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.

Additionally prevent integer underflow when size is less than ETH_FCS_LEN.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 55d7de9de6c30adce8d675c7ce513e283829c2ff to before 83de34967473ed31d276381373713cc2869a42e5Affected
  • 55d7de9de6c30adce8d675c7ce513e283829c2ff to before 44b9ed73369fc5ec85dd2ee487e986301792a82dAffected
  • 55d7de9de6c30adce8d675c7ce513e283829c2ff to before 7f247f5a2c18b3f21206cdd51193df4f38e1b9f5Affected
LinuxLinux
  • 4.3Affected
  • before 4.3Not affected
  • 6.1.22 through 6.1.*Not affected
  • 6.2.9 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.