CoreCVE
Back

HIGH

kernel: IGB driver inadequate buffer size for frames larger than MTU

Published Oct 15, 2023

Description

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.

Affected products

Remediation

Red Hat statement

This flaw is rated as Important because of its nature of exposure to the threat of impacting Confidentiality, Integrity and Availability by an attacker while being in an adjacent physical layer with no privilege required.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-131

References (9)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 15, 2023
Updated Aug 2, 2024
Reserved Oct 15, 2023
Link CVE-2023-45871
CISA Vulnrichment
Updated n/a
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2023-45871
Red Hat
Severity Important
Public date Aug 24, 2023
Links CVE-2023-45871 - Bugzilla
ENISA EUVD
Assigner mitre
Published Oct 15, 2023
Updated Aug 2, 2024
Exploited since n/a
Link EUVD-2023-50137
EUVD-2023-50137