Log in Start free

Vulnerability · Published May 2, 2025 · Assigned by Linux

CVE-2023-53068net: usb: lan78xx: Limit packet length to skb->len

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 90.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents. Additionally prevent integer underflow when size is less than ETH_FCS_LEN.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.25-1DEBIAN-CVE-2023-53068
Debian:13linux6.1.25-1DEBIAN-CVE-2023-53068
Debian:14linux6.1.25-1DEBIAN-CVE-2023-53068
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2023-53068
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53068
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53068
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2023-53068

Affected products (as reported)

VendorProductVersions
Linux Linux 55d7de9de6c30adce8d675c7ce513e283829c2ff – before 83de34967473ed31d276381373713cc2869a42e555d7de9de6c30adce8d675c7ce513e283829c2ff – before 44b9ed73369fc5ec85dd2ee487e986301792a82d55d7de9de6c30adce8d675c7ce513e283829c2ff – before 7f247f5a2c18b3f21206cdd51193df4f38e1b9f5
Linux Linux 4.3

References