MEDIUM Published May 2, 2025

CVE-2023-53125

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents.

CVSS base score

5.5 (v3.1)

Severity

MEDIUM

Attack vector

Local

Weakness

CWE-401

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

linux linux kernel

References

git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch
git.kernel.org Patch

View full NVD advisory →

More linux vulnerabilities

Published the same day

← Back to CVE watch

CVE-2023-53125

Affected products

References

More linux vulnerabilities

Published the same day

Related reading