CVE-2023-52655

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52655
In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value. The driver will then proceed to parse the header located at that position, which will either oops or process some random value. The fix is to check against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the driver.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2ebf775f0541ae0d474836fa0cf3220e502f8e3e Patch
https://git.kernel.org/stable/c/46412b2fb1f9cc895d6d4036bf24f640b5d86dab Patch
https://git.kernel.org/stable/c/82c386d73689a45d5ee8c1290827bce64056dddd Patch
https://git.kernel.org/stable/c/84f2e5b3e70f08fce3cb1ff73414631c5e490204 Patch
https://git.kernel.org/stable/c/ccab434e674ca95d483788b1895a70c21b7f016a Patch
https://git.kernel.org/stable/c/d69581c17608d81824dd497d9a54b6a5b6139975 Patch
https://git.kernel.org/stable/c/2ebf775f0541ae0d474836fa0cf3220e502f8e3e Patch
https://git.kernel.org/stable/c/46412b2fb1f9cc895d6d4036bf24f640b5d86dab Patch
https://git.kernel.org/stable/c/82c386d73689a45d5ee8c1290827bce64056dddd Patch
https://git.kernel.org/stable/c/84f2e5b3e70f08fce3cb1ff73414631c5e490204 Patch
https://git.kernel.org/stable/c/ccab434e674ca95d483788b1895a70c21b7f016a Patch
https://git.kernel.org/stable/c/d69581c17608d81824dd497d9a54b6a5b6139975 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
History

18 Sep 2025, 17:08

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/2ebf775f0541ae0d474836fa0cf3220e502f8e3e - () https://git.kernel.org/stable/c/2ebf775f0541ae0d474836fa0cf3220e502f8e3e - Patch
References () https://git.kernel.org/stable/c/46412b2fb1f9cc895d6d4036bf24f640b5d86dab - () https://git.kernel.org/stable/c/46412b2fb1f9cc895d6d4036bf24f640b5d86dab - Patch
References () https://git.kernel.org/stable/c/82c386d73689a45d5ee8c1290827bce64056dddd - () https://git.kernel.org/stable/c/82c386d73689a45d5ee8c1290827bce64056dddd - Patch
References () https://git.kernel.org/stable/c/84f2e5b3e70f08fce3cb1ff73414631c5e490204 - () https://git.kernel.org/stable/c/84f2e5b3e70f08fce3cb1ff73414631c5e490204 - Patch
References () https://git.kernel.org/stable/c/ccab434e674ca95d483788b1895a70c21b7f016a - () https://git.kernel.org/stable/c/ccab434e674ca95d483788b1895a70c21b7f016a - Patch
References () https://git.kernel.org/stable/c/d69581c17608d81824dd497d9a54b6a5b6139975 - () https://git.kernel.org/stable/c/d69581c17608d81824dd497d9a54b6a5b6139975 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: usb: aqc111: verifique el paquete para corregir el límite verdadero Si un dispositivo envía un paquete que está entre 0 y sizeof(u64), el valor pasado a skb_trim() como longitud se ajustará terminando como un valor muy grande. Luego, el controlador procederá a analizar el encabezado ubicado en esa posición, lo que procesará algún valor aleatorio. La solución es compararlo con sizeof(u64) en lugar de 0, como hace actualmente el controlador. El problema existe desde la introducción del controlador.
References () https://git.kernel.org/stable/c/2ebf775f0541ae0d474836fa0cf3220e502f8e3e - () https://git.kernel.org/stable/c/2ebf775f0541ae0d474836fa0cf3220e502f8e3e -
References () https://git.kernel.org/stable/c/46412b2fb1f9cc895d6d4036bf24f640b5d86dab - () https://git.kernel.org/stable/c/46412b2fb1f9cc895d6d4036bf24f640b5d86dab -
References () https://git.kernel.org/stable/c/82c386d73689a45d5ee8c1290827bce64056dddd - () https://git.kernel.org/stable/c/82c386d73689a45d5ee8c1290827bce64056dddd -
References () https://git.kernel.org/stable/c/84f2e5b3e70f08fce3cb1ff73414631c5e490204 - () https://git.kernel.org/stable/c/84f2e5b3e70f08fce3cb1ff73414631c5e490204 -
References () https://git.kernel.org/stable/c/ccab434e674ca95d483788b1895a70c21b7f016a - () https://git.kernel.org/stable/c/ccab434e674ca95d483788b1895a70c21b7f016a -
References () https://git.kernel.org/stable/c/d69581c17608d81824dd497d9a54b6a5b6139975 - () https://git.kernel.org/stable/c/d69581c17608d81824dd497d9a54b6a5b6139975 -

14 May 2024, 14:23

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 14:23

Updated : 2025-09-18 17:08

NVD link : CVE-2023-52655

Mitre link : CVE-2023-52655

CVE.ORG link : CVE-2023-52655

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo