CVE-2023-23559

HIGH

Linux Kernel 2.6.35-4.14.305 - Integer Overflow in rndis_query_oid

Title source: llm

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

Core 5

Core References

Patch, Third Party Advisory

Various Sources

Patch

Mailing List, Third Party Advisory mailing-list

Mailing List, Third Party Advisory mailing-list

CVSS v3 7.8

EPSS 0.0003

EPSS Percentile 9.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-190

Status published

Products (7)

debian/debian_linux 10.0

linux/linux_kernel 2.6.35 - 4.14.305

netapp/hci_baseboard_management_controller h300s

netapp/hci_baseboard_management_controller h410c

netapp/hci_baseboard_management_controller h410s

netapp/hci_baseboard_management_controller h500s

netapp/hci_baseboard_management_controller h700s

Published Jan 13, 2023

Tracked Since Feb 18, 2026