Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2023-53125— net: usb: smsc75xx: Limit packet length to skb->len

AI Predicted 7.8 Difficulty: Moderate EPSS 0.06% · P20

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57< 4a4de0a68b18485c68ab4f0cfa665b1633c6d277affected
d0cad871703b898a442e4049c532ec39168e5b57< 53966d572d056d6b234cfe76a5f9d60049d3c178affected
d0cad871703b898a442e4049c532ec39168e5b57< 9fabdd79051a9fe51388df099aff6e4b660fedd2affected
d0cad871703b898a442e4049c532ec39168e5b57< e294f0aa47e4844f3d3c8766c02accd5a76a7d4eaffected
d0cad871703b898a442e4049c532ec39168e5b57< 105db6574281e1e03fcbf87983f4fee111682306affected
d0cad871703b898a442e4049c532ec39168e5b57< c7bdc137ca163b90917c1eeba4f1937684bd4f8baffected
d0cad871703b898a442e4049c532ec39168e5b57< 8ee5df9c039e37b9d8eb5e3de08bfb7f53d31cb6affected
d0cad871703b898a442e4049c532ec39168e5b57< d8b228318935044dafe3a5bc07ee71a1f1424b8daffected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-53125

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net: usb: smsc75xx: Limit packet length to skb->len
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于smsc75xx驱动未限制数据包长度为skb长度，可能导致内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux d0cad871703b898a442e4049c532ec39168e5b57 ~ 4a4de0a68b18485c68ab4f0cfa665b1633c6d277 -
LinuxLinux 2.6.34 -

II. Public POCs for CVE-2023-53125

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53125

请登录查看更多情报信息。

Patches & Fixes for CVE-2023-53125 (7)

Other References for CVE-2023-53125 (1)

Same Patch Batch · Linux · 2025-05-02 · 107 CVEs total

CVE-2023-53100ext4: fix WARNING in ext4_update_inline_data
CVE-2023-53114i40e: Fix kernel crash during reboot when adapter is in recovery mode
CVE-2023-53112drm/i915/sseu: fix max_subslices array-index-out-of-bounds access
CVE-2023-53113wifi: nl80211: fix NULL-ptr deref in offchan check
CVE-2023-53111loop: Fix use-after-free issues
CVE-2023-53109net: tunnels: annotate lockless accesses to dev->needed_headroom
CVE-2023-53110net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
CVE-2023-53108net/iucv: Fix size of interrupt data
CVE-2023-53106nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
CVE-2023-53107veth: Fix use after free in XDP_REDIRECT
CVE-2023-53105net/mlx5e: Fix cleanup null-ptr deref on encap lock
CVE-2023-53103bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
CVE-2023-53101ext4: zero i_disksize when initializing the bootloader inode
CVE-2023-53102ice: xsk: disable txq irq before flushing hw
CVE-2023-53090drm/amdkfd: Fix an illegal memory access
CVE-2023-53092interconnect: exynos: fix node leak in probe PM QoS error path
CVE-2023-53093tracing: Do not let histogram values have some modifiers
CVE-2023-53091ext4: update s_journal_inum if it changes after journal replay
CVE-2023-53094tty: serial: fsl_lpuart: fix race on RX DMA shutdown
CVE-2023-53089ext4: fix task hung in ext4_xattr_delete_inode

Showing top 20 of 107 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53125

No comments yet

Leave a comment