Most recent entries from all

CVE-2023-53125 — net: usb: smsc75xx: Limit packet length to skb->len

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

net: usb: smsc75xx: Limit packet length to skb->len

Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents.

RHSA-2025:15785 — Red Hat Security Advisory: kernel security update

kernel: net: usb: smsc75xx: Limit packet length to skb->len kernel: net/sched: Always pass notifications when child class becomes empty kernel: idpf: convert control queue mutex to a spinlock kernel: drm/gem: Acquire references on GEM handles for framebuffers kernel: net/sched: ets: use old 'nbands' while purging unused classes

RHSA-2025:17109 — Red Hat Security Advisory: kernel-rt security update

kernel: ALSA: usb-audio: ALSA USB Audio Out-of-Bounds Bug kernel: md-raid10: fix KASAN warning kernel: ALSA: bcd2000: Fix a UAF bug on the error path of probing kernel: net: usb: smsc75xx: Limit packet length to skb->len kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw kernel: net/sched: sch_qfq: Fix race condition on qfq_aggregate