Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-53068— net: usb: lan78xx: Limit packet length to skb->len

AI Predicted 7.8 Difficulty: Easy EPSS 0.17% · P7

Affected Version Matrix 8

VendorProductVersion RangeStatus
LinuxLinux55d7de9de6c30adce8d675c7ce513e283829c2ff< 83de34967473ed31d276381373713cc2869a42e5affected
55d7de9de6c30adce8d675c7ce513e283829c2ff< 44b9ed73369fc5ec85dd2ee487e986301792a82daffected
55d7de9de6c30adce8d675c7ce513e283829c2ff< 7f247f5a2c18b3f21206cdd51193df4f38e1b9f5affected
4.3affected
< 4.3unaffected
6.1.22≤ 6.1.*unaffected
6.2.9≤ 6.2.*unaffected
6.3≤ *unaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-53068

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net: usb: lan78xx: Limit packet length to skb->len
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents. Additionally prevent integer underflow when size is less than ETH_FCS_LEN.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于lan78xx驱动未限制数据包长度，可能导致内核内存泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 55d7de9de6c30adce8d675c7ce513e283829c2ff ~ 83de34967473ed31d276381373713cc2869a42e5 -
LinuxLinux 4.3 -

II. Public POCs for CVE-2023-53068

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53068

请登录查看更多情报信息。

Patches & Fixes for CVE-2023-53068 (3)

Same Patch Batch · Linux · 2025-05-02 · 107 CVEs total

CVE-2025-377987.8 HIGHcodel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
CVE-2025-377977.8 HIGHnet_sched: hfsc: Fix a UAF vulnerability in class handling
CVE-2023-53114i40e: Fix kernel crash during reboot when adapter is in recovery mode
CVE-2023-53089ext4: fix task hung in ext4_xattr_delete_inode
CVE-2023-53112drm/i915/sseu: fix max_subslices array-index-out-of-bounds access
CVE-2023-53113wifi: nl80211: fix NULL-ptr deref in offchan check
CVE-2023-53111loop: Fix use-after-free issues
CVE-2023-53109net: tunnels: annotate lockless accesses to dev->needed_headroom
CVE-2023-53110net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
CVE-2023-53108net/iucv: Fix size of interrupt data
CVE-2023-53106nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
CVE-2023-53107veth: Fix use after free in XDP_REDIRECT
CVE-2023-53105net/mlx5e: Fix cleanup null-ptr deref on encap lock
CVE-2023-53103bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
CVE-2023-53101ext4: zero i_disksize when initializing the bootloader inode
CVE-2023-53091ext4: update s_journal_inum if it changes after journal replay
CVE-2023-53094tty: serial: fsl_lpuart: fix race on RX DMA shutdown
CVE-2023-53092interconnect: exynos: fix node leak in probe PM QoS error path
CVE-2023-53093tracing: Do not let histogram values have some modifiers
CVE-2023-53095drm/ttm: Fix a NULL pointer dereference

Showing top 20 of 107 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53068

No comments yet

Leave a comment