PT-2023-6288 · Linux+9 · Linux Kernel+9
Manfred Rudigier
·
Published
2023-08-24
·
Updated
2025-02-05
·
CVE-2023-45871
CVSS v3.1
7.5
High
| Vector | AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.3
Description
An issue was discovered in the IGB driver in the Linux kernel. A buffer size may not be adequate for frames larger than the MTU, which could lead to a buffer overflow. This issue is related to the
igb set rx buffer len() function in the drivers/net/ethernet/intel/igb/igb main.c module. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For Linux kernel versions prior to 6.5.3, update to version 6.5.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable
igb main.c module to minimize the risk of exploitation. Avoid using frames larger than the MTU in the affected IGB driver until the issue is resolved.Fix
DoS
Out of bounds Read
Memory Corruption
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu