Vulnerability · Published May 2, 2025 · Assigned by Linux
CVE-2023-53125net: usb: smsc75xx: Limit packet length to skb->len
Medium 5.5
In plain English
A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 91.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:8 | kernel | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-core | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-debug | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-devel | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-doc | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-doc | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-headers | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-headers | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-modules | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-64k-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-kvm | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-kvm | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-tools | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-tools | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-uki-virt-addons | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | libperf | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | perf | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | perf | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:8 | python3-perf | 4.18.0-553.75.1.el8_10 | ALSA-2025:15785 |
| AlmaLinux:9 | python3-perf | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | rtla | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| AlmaLinux:9 | rv | 5.14.0-570.46.1.el9_6 | ALSA-2025:16398 |
| Debian:12 | linux | 6.1.25-1 | DEBIAN-CVE-2023-53125 |
| Debian:13 | linux | 6.1.25-1 | DEBIAN-CVE-2023-53125 |
| Debian:14 | linux | 6.1.25-1 | DEBIAN-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux | 5.15.0-79.86 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1042.47 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1045.52 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1045.52.1 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1039.47 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1039.44 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1025.30 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1035.38 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1037.42 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1039.44 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-79.88 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1030.30 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1016.16 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1002.2 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1040.46 | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1035.38 | UBUNTU-CVE-2023-53125 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2023-53125 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1025.29 | UBUNTU-CVE-2023-53125 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | d0cad871703b898a442e4049c532ec39168e5b57 – before 4a4de0a68b18485c68ab4f0cfa665b1633c6d277d0cad871703b898a442e4049c532ec39168e5b57 – before 53966d572d056d6b234cfe76a5f9d60049d3c178d0cad871703b898a442e4049c532ec39168e5b57 – before 9fabdd79051a9fe51388df099aff6e4b660fedd2d0cad871703b898a442e4049c532ec39168e5b57 – before e294f0aa47e4844f3d3c8766c02accd5a76a7d4ed0cad871703b898a442e4049c532ec39168e5b57 – before 105db6574281e1e03fcbf87983f4fee111682306d0cad871703b898a442e4049c532ec39168e5b57 – before c7bdc137ca163b90917c1eeba4f1937684bd4f8bd0cad871703b898a442e4049c532ec39168e5b57 – before 8ee5df9c039e37b9d8eb5e3de08bfb7f53d31cb6d0cad871703b898a442e4049c532ec39168e5b57 – before d8b228318935044dafe3a5bc07ee71a1f1424b8d |
| Linux | Linux | 2.6.34 |
References
- https://git.kernel.org/stable/c/4a4de0a68b18485c68ab4f0cfa665b1633c6d277
- https://git.kernel.org/stable/c/53966d572d056d6b234cfe76a5f9d60049d3c178
- https://git.kernel.org/stable/c/9fabdd79051a9fe51388df099aff6e4b660fedd2
- https://git.kernel.org/stable/c/e294f0aa47e4844f3d3c8766c02accd5a76a7d4e
- https://git.kernel.org/stable/c/105db6574281e1e03fcbf87983f4fee111682306
- https://git.kernel.org/stable/c/c7bdc137ca163b90917c1eeba4f1937684bd4f8b
- https://git.kernel.org/stable/c/8ee5df9c039e37b9d8eb5e3de08bfb7f53d31cb6
- https://git.kernel.org/stable/c/d8b228318935044dafe3a5bc07ee71a1f1424b8d