In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/33d1603a38e05886c538129ddfe00bd52d347e7b cve-icon cve-icon
https://git.kernel.org/stable/c/70eb25c6a6cde149affe8a587371a3a8ad295ba0 cve-icon cve-icon
https://git.kernel.org/stable/c/733580e268a53db1cd01f2251419da91866378f6 cve-icon cve-icon
https://git.kernel.org/stable/c/ba6c40227108f8ee428e42eb0337b48ed3001e65 cve-icon cve-icon
https://git.kernel.org/stable/c/d3c145a4d24b752c9a1314d5a595014d51471418 cve-icon cve-icon
https://git.kernel.org/stable/c/e041bef1adee02999cf24f9a2e15ed452bc363fe cve-icon cve-icon
https://git.kernel.org/stable/c/f2111c791d885211714db85f9a06188571c57dd0 cve-icon cve-icon
https://git.kernel.org/stable/c/ff821092cf02a70c2bccd2d19269f01e29aa52cf cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025050210-CVE-2023-53062-63a2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53062 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53062 cve-icon
History

Fri, 07 Nov 2025 02:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Sat, 07 Jun 2025 03:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 05 May 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 02 May 2025 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb->len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.
Title net: usb: smsc95xx: Limit packet length to skb->len
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-05-02T15:55:16.211Z

Updated: 2025-05-04T07:48:59.615Z

Reserved: 2025-05-02T15:51:43.547Z

Link: CVE-2023-53062

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-05-02T16:15:25.257

Modified: 2025-11-07T02:23:30.780

Link: CVE-2023-53062

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-02T00:00:00Z

Links: CVE-2023-53062 - Bugzilla