UBUNTU-CVE-2023-45871
Vulnerability Summary
Timeline
Description
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.
CVSS Metrics
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- ubuntu•linux
all | < 4.15.0-220.231 | < 5.4.0-167.184 | < 5.15.0-89.99
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
all | < 4.15.0-1163.176 | < 5.4.0-1114.124 | < 5.15.0-1050.55
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1050.55~20.04.1
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1114.124~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
< 6.2.0-1016.16~22.04.1
- ubuntu•linux-aws-fips
< 4.15.0-2102.108 | all | < 5.4.0-1114.124+fips1
- ubuntu•linux-aws-hwe
< 4.15.0-1163.176~16.04.1
- ubuntu•linux-azure
< 4.15.0-1172.187~14.04.1 | < 4.15.0-1172.187~16.04.1 | all | < 5.4.0-1120.127 | < 5.15.0-1052.60
- ubuntu•linux-azure-4.15
< 4.15.0-1172.187
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1052.60~20.04.1
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1120.127~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.2
< 6.2.0-1017.17~22.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all | < 5.15.0-1052.60.1
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.2
< 6.2.0-1017.17~22.04.1.1
- ubuntu•linux-azure-fips
< 4.15.0-2081.87 | all | < 5.4.0-1121.128+fips1
- ubuntu•linux-bluefield
< 5.15.0-1032.34 | < 5.4.0-1075.81 | < 5.15.0-1032.34 | all
- ubuntu•linux-fips
all | < 4.15.0-1118.129 | < 5.4.0-1089.98
- ubuntu•linux-gcp
< 4.15.0-1157.174~16.04.1 | all | < 5.4.0-1118.127 | < 5.15.0-1047.55
- ubuntu•linux-gcp-4.15
< 4.15.0-1157.174
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1047.55~20.04.1
- ubuntu•linux-gcp-5.19
all
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1118.127~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.2
< 6.2.0-1019.21~22.04.1
- ubuntu•linux-gcp-fips
< 4.15.0-2065.70 | all | < 5.4.0-1118.127+fips1
- ubuntu•linux-gke
all | < 5.15.0-1047.52
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
all
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.4.0-1081.85 | < 5.15.0-1033.39
- ubuntu•linux-gkeop-5.15
< 5.15.0-1033.39~20.04.1
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
< 4.15.0-220.231~16.04.1 | all
Showing first 50 affected entries in server-rendered view.
References (18)
- https://ubuntu.com/security/CVE-2023-45871
- https://git.kernel.org/linus/bb5ed01cd2428cd25b1c88a3a9cba87055eb289f
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3
- https://ubuntu.com/security/notices/USN-6494-1
- https://ubuntu.com/security/notices/USN-6495-1
- https://ubuntu.com/security/notices/USN-6496-1
- https://ubuntu.com/security/notices/USN-6502-1
- https://ubuntu.com/security/notices/USN-6516-1
- https://ubuntu.com/security/notices/USN-6502-2
- https://ubuntu.com/security/notices/USN-6502-3
- https://ubuntu.com/security/notices/USN-6520-1
- https://ubuntu.com/security/notices/USN-6494-2
- https://ubuntu.com/security/notices/USN-6495-2
- https://ubuntu.com/security/notices/USN-6496-2
- https://ubuntu.com/security/notices/USN-6502-4
- https://ubuntu.com/security/notices/USN-6532-1
- https://www.cve.org/CVERecord?id=CVE-2023-45871