Linux · Linux Kernel · CVE-2023-45871
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.5.3
**Description**
An issue was discovered in the IGB driver in the Linux kernel. A buffer size may not be adequate for frames larger than the MTU, which could lead to a buffer overflow. This issue is related to the `igb set rx buffer len()` function in the `drivers/net/ethernet/intel/igb/igb main.c` module. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
**Recommendations**
For Linux kernel versions prior to 6.5.3, update to version 6.5.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable `igb main.c` module to minimize the risk of exploitation. Avoid using frames larger than the MTU in the affected IGB driver until the issue is resolved.