Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Manfred Rudigier

#37366de 53,635
7.5CVSS total
Vulnerabilidades · 1
PT-2023-6288
7.5
2023-08-24
Linux · Linux Kernel · CVE-2023-45871
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.5.3 **Description** An issue was discovered in the IGB driver in the Linux kernel. A buffer size may not be adequate for frames larger than the MTU, which could lead to a buffer overflow. This issue is related to the `igb set rx buffer len()` function in the `drivers/net/ethernet/intel/igb/igb main.c` module. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** For Linux kernel versions prior to 6.5.3, update to version 6.5.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable `igb main.c` module to minimize the risk of exploitation. Avoid using frames larger than the MTU in the affected IGB driver until the issue is resolved.