PT-2025-53187 · Linux · Linux Kernel

Published 2023-01-03 · Updated 2026-02-24 · CVE-2023-54110

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s rndis query function where variables off and len, typed as uint32, are susceptible to manipulation through incoming RNDIS response messages. An attacker can set the off variable to a large value, causing an integer overflow when added to len and 8. This bypasses validation, allowing the response pointer to access memory beyond the expected buffer boundaries, potentially leading to information leakage, for example, via the RNDIS OID 802 3 PERMANENT ADDRESS OID.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2026-02420

CVE-2023-54110

OESA-2026-1276

SUSE-SU-2026:0263-1

SUSE-SU-2026:0316-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0350-1

SUSE-SU-2026:0352-1

SUSE-SU-2026:0369-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 1142

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54110.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54110 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54218 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50850 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54283 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68241 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-54110 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50846 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54110 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54110 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0352-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0369-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71093 · Security Note