CVE-2023-53125: net: usb: smsc75xx: Limit packet length to skb->len
In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc75xx: Limit packet length to skb->len
Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the resolution for net: usb: smsc75xx to limit the packet length to the actual socket buffer length (up to 9026 bytes), preventing kernel memory content leakage when a cloned skb is passed up the network stack.
Linux kernel (net: usb: smsc75xx) Limit packet length to skb->len (up to 9026 bytes) = Set packet length retrieved from skb data to min(retrieved_length, skb->len) with an upper bound of 9026 bytes
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53125?
CVE-2023-53125 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2023-53125?
To fix CVE-2023-53125, you should update to the latest version of the Linux kernel where the vulnerability has been patched.
What specific component is affected by CVE-2023-53125?
CVE-2023-53125 affects the usb subsystem, specifically the smsc75xx driver within the Linux kernel.
What types of attacks can CVE-2023-53125 enable?
CVE-2023-53125 could potentially allow for denial of service attacks due to improper packet length handling.
Is CVE-2023-53125 user exploitable?
CVE-2023-53125 is considered to be exploitable by users with access to the affected system, allowing them to manipulate network packets.