PT-2025-18868 · Linux · Linux Kernel

Published 2025-05-02 · Updated 2025-05-06 · CVE-2023-53104

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the skb pull() function in the smsc75xx driver, where a packet length check needs to be moved to prevent a kernel panic. This panic occurs when rx cmd a & RX CMD A RED evaluates to true. The fix involves moving the packet length check after size and align count calculation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-53104

Affected Products

Linux Kernel

References · 18

• https://osv.dev/vulnerability/CVE-2023-53104 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53104 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53104 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53104 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53104 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53104 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53104 · Security Note
• https://git.kernel.org/stable/c/2cc46ed406bb325f10a251b03d9a83ae67b3d3d8 · Note
• https://git.kernel.org/stable/c/181e9db5caec4daae57a58675a1ceaa47348958f · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-53104 · Note
• https://twitter.com/CVEnew/status/1918379176714715227 · Twitter Post
• https://git.kernel.org/stable/c/7bf0eac3fdd2d25f5c6ceab63e3e4902e274f7ee · Note
• https://git.kernel.org/stable/c/89441504d66d116eb5ce58c132f58cdcca5b498a · Note
• https://git.kernel.org/stable/c/5c96eeba93980c5cef5176a4bac0ddb722fd57dc · Note
• https://git.kernel.org/stable/c/4caee8e7d91e4f06f21881726da9c1bb2cd6e4fa · Note