CVE-2023-54110
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
usb: rndis_host: Secure rndis_query check against int overflow
In the Linux kernel, the following vulnerability has been resolved: usb: rndis_host: Secure rndis_query check against int overflow Variables off and len typed as uint32 in rndis_query function are controlled by incoming RNDIS response message thus their value may be manipulated. Setting off to a unexpectetly large value will cause the sum with len and 8 to overflow and pass the implemented validation step. Consequently the response pointer will be referring to a location past the expected buffer boundaries allowing information leakage e.g. via RNDIS_OID_802_3_PERMANENT_ADDRESS OID.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | 55782f6d63a5a3dd3b84c1e0627738fc5b146b4e | Unavailable | None listed |
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | 02ffb4ecf0614c58e3d0e5bfbe99588c9ddc77c0 | Unavailable | None listed |
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | ebe6d2fcf7835f98cdbb1bd5e0414be20c321578 | Unavailable | None listed |
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | 232ef345e5d76e5542f430a29658a85dbef07f0b | Unavailable | None listed |
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | 11cd4ec6359d90b13ffb8f85a9df8637f0cf8d95 | Unavailable | None listed |
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | 39eadaf5611ddd064ad1c53da65c02d2b0fe22a4 | Unavailable | None listed |
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | a713602807f32afc04add331410c77ef790ef77a | Unavailable | None listed |
| ddda08624013e8435e9f7cfc34a35bd7b3520b6d | affected | git | c7dd13805f8b8fc1ce3b6d40f6aff47e66b72ad2 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.22 | Unavailable | None listed |
| 4.14.303 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.270 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.229 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.163 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.87 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.0.19 | unaffected | semver | Unavailable | 6.0.* | None listed |
| 6.1.5 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |