CVE-2023-53062

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: usb: smsc95xx: Limit packet length to skb->len

Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 2f7ca802bdae2ca41022618391c70c2876d92190, < 733580e268a53db1cd01f2251419da91866378f6; >= 2f7ca802bdae2ca41022618391c70c2876d92190, < d3c145a4d24b752c9a1314d5a595014d51471418; >= 2f7ca802bdae2ca41022618391c70c2876d92190, < f2111c791d885211714db85f9a06188571c57dd0; >= 2f7ca802bdae2ca41022618391c70c2876d92190, < 33d1603a38e05886c538129ddfe00bd52d347e7b; >= 2f7ca802bdae2ca41022618391c70c2876d92190, < ba6c40227108f8ee428e42eb0337b48ed3001e65; >= 2f7ca802bdae2ca41022618391c70c2876d92190, < e041bef1adee02999cf24f9a2e15ed452bc363fe; >= 2f7ca802bdae2ca41022618391c70c2876d92190, < 70eb25c6a6cde149affe8a587371a3a8ad295ba0; >= 2f7ca802bdae2ca41022618391c70c2876d92190, < ff821092cf02a70c2bccd2d19269f01e29aa52cf
LinuxLinux2.6.28

References

Timeline

Published
May 2, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-530645.5In the Linux kernel, the following vulnerability has been resolved: iavf: fix hang on reboot with ice When a system with E810 with existinCVE-2023-530657.8In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perf_output_begin parameter is incorrectly invoked in peCVE-2023-530665.5In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We hCVE-2023-530675.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Only call get_timer_irq() once in constant_clockevent_init()CVE-2023-530685.5In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retriCVE-2023-530695.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu foCVE-2023-53076.1The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthCVE-2023-530705.5In the Linux kernel, the following vulnerability has been resolved: ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absenCVE-2023-530715.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76_unregister_device() on unregistered hw TryCVE-2023-530727.8In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reporCVE-2023-530735.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' (CVE-2023-530745.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini The call trace
CVE-2023-53062: Medium severity, CVSS 5.5 | Vulnix