CVE-2023-53062

net: usb: smsc95xx: Limit packet length to skb->len

MEDIUM

5.5

CVSS Score

Published: May 2, 2025 at 03:55 PM UTC

Updated: June 17, 2026 at 06:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.28 ≤ v < 4.14.3122.6.28 ≤ v < 4.19.2802.6.28 ≤ v < 5.10.1772.6.28 ≤ v < 5.15.1052.6.28 ≤ v < 5.4.2402.6.28 ≤ v < 6.1.222.6.28 ≤ v < 6.2.92.6.28 ≤ v < 6.34.15 ≤ v < 4.19.2804.20 ≤ v < 5.4.2405.11 ≤ v < 5.15.1055.16 ≤ v < 6.1.225.5 ≤ v < 5.10.1776.2 ≤ v < 6.2.92.6.282f7ca802bdae2ca41022618391c70c2876d921906.3 rc1 6.3 rc2 6.3 rc3

Vendor states this is fixed in 33d1603a38e05886c538129ddfe00bd52d347e7b (fixed)

Vendor states this is fixed in 70eb25c6a6cde149affe8a587371a3a8ad295ba0 (fixed)

Vendor states this is fixed in 733580e268a53db1cd01f2251419da91866378f6 (fixed)

Vendor states this is fixed in ba6c40227108f8ee428e42eb0337b48ed3001e65 (fixed)

Vendor states this is fixed in d3c145a4d24b752c9a1314d5a595014d51471418 (fixed)

Vendor states this is fixed in e041bef1adee02999cf24f9a2e15ed452bc363fe (fixed)

Vendor states this is fixed in f2111c791d885211714db85f9a06188571c57dd0 (fixed)

Vendor states this is fixed in ff821092cf02a70c2bccd2d19269f01e29aa52cf (fixed)

Vendor states this is fixed in 2.6.28 (unaffected)

Vendor states this is fixed in 4.14.312 (unaffected)

Vendor states this is fixed in 4.19.280 (unaffected)

Vendor states this is fixed in 5.10.177 (unaffected)