CVE-2023-45871

HIGH

Linux kernel <6.5.3 - Buffer Overflow

Title source: llm

Description

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.

References (4)

[Release Notes] https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3

[Mailing List, Patch] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f

[Mailing List, Third Party Advisory] https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html

[Third Party Advisory] https://security.netapp.com/advisory/ntap-20231110-0001/

Scores

CVSS v3 7.5

EPSS 0.0002

EPSS Percentile 5.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-131

Status published

Affected Products (2)

linux/linux_kernel < 4.14.326

debian/debian_linux

Timeline

Published Oct 15, 2023

Tracked Since Feb 18, 2026