CVE-2023-45871CWE-131

CVE-2023-45871

High · published October 15, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00635 · 49.8th percentile
Weakness
CWE-131 · Incorrect Calculation of Buffer Size
Published
2023-10-15T05:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 3.4, < 4.14.3264.14.326
linux/linux_kernel≥ 4.15, < 4.19.2954.19.295
linux/linux_kernel≥ 4.20, < 5.4.2575.4.257
linux/linux_kernel≥ 5.5, < 5.10.1955.10.195
linux/linux_kernel≥ 5.11, < 5.15.1325.15.132
linux/linux_kernel≥ 5.16, < 6.1.536.1.53
linux/linux_kernel≥ 6.2, < 6.4.166.4.16
linux/linux_kernel≥ 6.5, < 6.5.36.5.3
debian/debian_linuxall versions—
References (10)
EPSS history
Timeline
  • 15 OCT 00:00Z
    An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3
    cvelistv5