| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025050210-CVE-2023-53062-63a2@gregkh> Date: Fri, 2 May 2025 17:55:27 +0200 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...nel.org> Subject: CVE-2023-53062: net: usb: smsc95xx: Limit packet length to skb->len From: Greg Kroah-Hartman <gregkh@...nel.org> Description =========== In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents. The Linux kernel CVE team has assigned CVE-2023-53062 to this issue. Affected and fixed versions =========================== Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 4.14.312 with commit 733580e268a53db1cd01f2251419da91866378f6 Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 4.19.280 with commit d3c145a4d24b752c9a1314d5a595014d51471418 Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 5.4.240 with commit f2111c791d885211714db85f9a06188571c57dd0 Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 5.10.177 with commit 33d1603a38e05886c538129ddfe00bd52d347e7b Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 5.15.105 with commit ba6c40227108f8ee428e42eb0337b48ed3001e65 Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 6.1.22 with commit e041bef1adee02999cf24f9a2e15ed452bc363fe Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 6.2.9 with commit 70eb25c6a6cde149affe8a587371a3a8ad295ba0 Issue introduced in 2.6.28 with commit 2f7ca802bdae2ca41022618391c70c2876d92190 and fixed in 6.3 with commit ff821092cf02a70c2bccd2d19269f01e29aa52cf Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2023-53062 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/net/usb/smsc95xx.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/733580e268a53db1cd01f2251419da91866378f6 https://git.kernel.org/stable/c/d3c145a4d24b752c9a1314d5a595014d51471418 https://git.kernel.org/stable/c/f2111c791d885211714db85f9a06188571c57dd0 https://git.kernel.org/stable/c/33d1603a38e05886c538129ddfe00bd52d347e7b https://git.kernel.org/stable/c/ba6c40227108f8ee428e42eb0337b48ed3001e65 https://git.kernel.org/stable/c/e041bef1adee02999cf24f9a2e15ed452bc363fe https://git.kernel.org/stable/c/70eb25c6a6cde149affe8a587371a3a8ad295ba0 https://git.kernel.org/stable/c/ff821092cf02a70c2bccd2d19269f01e29aa52cf
Powered by blists - more mailing lists