CVE-2023-23559CWE-190

CVE-2023-23559

High · published January 13, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2023-01-13T06:15Z
Affected products (12)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.35, < 4.14.3054.14.305
linux/linux_kernel≥ 4.15, < 4.19.2724.19.272
linux/linux_kernel≥ 4.20, < 5.4.2315.4.231
linux/linux_kernel≥ 5.5, < 5.10.1665.10.166
linux/linux_kernel≥ 5.11, < 5.15.915.15.91
linux/linux_kernel≥ 5.16, < 6.1.96.1.9
netapp/hci_baseboard_management_controllerall versions—
netapp/hci_baseboard_management_controllerall versions—
netapp/hci_baseboard_management_controllerall versions—
netapp/hci_baseboard_management_controllerall versions—
netapp/hci_baseboard_management_controllerall versions—
debian/debian_linuxall versions—
References (12)
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c · [email protected]https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html · [email protected]https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html · [email protected]https://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/ · [email protected]https://security.netapp.com/advisory/ntap-20230302-0003/ · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html · af854a3a-2127-422b-91ae-364da2661108https://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230302-0003/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-769027.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 13 JAN 00:00Z
    In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition
    cvelistv5