CVE-2023-45871: Buffer Overflow
First published: Sun Oct 15 2023(Updated: )
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <6.5.3 | |
| redhat/Kernel | <6.6 | 6.6 |
| IBM Security Guardium | <=11.4 | |
| IBM Security Guardium | <=11.5 | |
| IBM Security Guardium | <=12.0 | |
| Linux Linux kernel | >=3.4<4.14.326 | |
| Linux Linux kernel | >=4.15<4.19.295 | |
| Linux Linux kernel | >=4.20<5.4.257 | |
| Linux Linux kernel | >=5.5<5.10.195 | |
| Linux Linux kernel | >=5.11<5.15.132 | |
| Linux Linux kernel | >=5.16<6.1.53 | |
| Linux Linux kernel | >=6.2<6.4.16 | |
| Linux Linux kernel | >=6.5<6.5.3 | |
| Debian Debian Linux | =10.0 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.112-1 6.11.7-1 6.11.9-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f
- https://security.netapp.com/advisory/ntap-20231110-0001/
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://launchpad.net/bugs/cve/CVE-2023-45871
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2244724
- https://access.redhat.com/errata/RHSA-2023:7734
- https://access.redhat.com/errata/RHSA-2023:7749
- https://access.redhat.com/errata/RHSA-2024:0378
- https://access.redhat.com/errata/RHSA-2024:0381
- https://access.redhat.com/errata/RHSA-2024:0386
- https://access.redhat.com/errata/RHSA-2024:0431
- https://access.redhat.com/errata/RHSA-2024:0432
- https://access.redhat.com/errata/RHSA-2024:0439
- https://access.redhat.com/errata/RHSA-2024:0448
- https://access.redhat.com/errata/RHSA-2024:0412
- https://access.redhat.com/errata/RHSA-2024:0554
- https://access.redhat.com/errata/RHSA-2024:0563
- https://access.redhat.com/errata/RHSA-2024:0562
- https://access.redhat.com/errata/RHSA-2024:0593
- https://access.redhat.com/errata/RHSA-2024:0575
- https://access.redhat.com/errata/RHSA-2024:0876
- https://access.redhat.com/errata/RHSA-2024:0881
- https://access.redhat.com/errata/RHSA-2024:0897
- https://access.redhat.com/errata/RHSA-2024:0980
- https://access.redhat.com/errata/RHSA-2024:0999
- https://access.redhat.com/errata/RHSA-2024:1249
- https://access.redhat.com/errata/RHSA-2024:1268
- https://access.redhat.com/errata/RHSA-2024:1269
- https://access.redhat.com/errata/RHSA-2024:1278
- https://access.redhat.com/errata/RHSA-2024:1323
- https://access.redhat.com/errata/RHSA-2024:1332
- https://bugzilla.redhat.com/show_bug.cgi?id=2244723
- https://git.kernel.org/linus/bb5ed01cd2428cd25b1c88a3a9cba87055eb289f
- https://security-tracker.debian.org/tracker/CVE-2023-45871
- https://ubuntu.com/security/notices/USN-6494-1
- https://ubuntu.com/security/notices/USN-6495-1
- https://ubuntu.com/security/notices/USN-6496-1
- https://ubuntu.com/security/notices/USN-6502-1
- https://ubuntu.com/security/notices/USN-6516-1
- https://ubuntu.com/security/notices/USN-6502-2
- https://ubuntu.com/security/notices/USN-6502-3
- https://ubuntu.com/security/notices/USN-6520-1
- https://ubuntu.com/security/notices/USN-6494-2
- https://ubuntu.com/security/notices/USN-6495-2
- https://ubuntu.com/security/notices/USN-6496-2
- https://ubuntu.com/security/notices/USN-6502-4
- https://ubuntu.com/security/notices/USN-6532-1
- https://www.cve.org/CVERecord?id=CVE-2023-45871
- https://nvd.nist.gov/vuln/detail/CVE-2023-45871
- https://git.kernel.org/linus/89eaefb61dc9170237d95b844dd357338fc7225d
- https://ubuntu.com/security/CVE-2023-45871
- https://exchange.xforce.ibmcloud.com/vulnerabilities/268717
- https://www.ibm.com/support/pages/node/7154435 (Advisory)
Frequently Asked Questions
What is CVE-2023-45871?
CVE-2023-45871 is an issue in the IGB driver in the Linux kernel before 6.5.3.
What is the severity of CVE-2023-45871?
The severity of CVE-2023-45871 is critical with a score of 9.8.
How does CVE-2023-45871 affect Linux?
CVE-2023-45871 affects the Linux kernel before version 6.5.3.
What is the fix for CVE-2023-45871?
To fix CVE-2023-45871, update your Linux kernel to version 6.5.3 or later.
What is the Common Weakness Enumeration (CWE) for CVE-2023-45871?
The Common Weakness Enumeration (CWE) for CVE-2023-45871 is CWE-120 (Buffer Copy without Checking Size of Input).
- collector/nvd-index
- collector/mitre-cve
- agent/type
- agent/first-publish-date
- agent/author
- agent/remedy
- collector/launchpad-cve
- source/Launchpad
- agent/weakness
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-45871
- agent/software-canonical-lookup
- collector/ibm-support
- source/IBM
- agent/references
- agent/last-modified-date
- agent/event
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- agent/tags
- agent/description
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux linux kernel
- package-manager/redhat
- vendor/ibm
- canonical/ibm security guardium
- version/ibm security guardium/11.4
- version/ibm security guardium/11.5
- version/ibm security guardium/12.0
- version/linux linux kernel/3.4
- version/linux linux kernel/4.15
- version/linux linux kernel/4.20
- version/linux linux kernel/5.5
- version/linux linux kernel/5.11
- version/linux linux kernel/5.16
- version/linux linux kernel/6.2
- version/linux linux kernel/6.5
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/10.0
- package-manager/debian