CVE-2023-45871

kernel: IGB driver inadequate buffer size for frames larger than MTU

Published Oct 15, 2023 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3710-1 linux security update
Ubuntu USN Ubuntu USN USN-6494-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6494-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6495-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6495-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6496-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6496-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-2 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-3 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6516-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6520-1 Linux kernel (StarFive) vulnerabilities
Ubuntu USN Ubuntu USN USN-6532-1 Linux kernel vulnerabilities
History
Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
CPEs cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

  • CWE-131

    Incorrect Calculation of Buffer Size

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 15, 2026, 12:04 AM
Reserved
Oct 15, 2023, 12:00 AM
Status
Modified
Published
Oct 15, 2023, 1:15 AM
Modified
Oct 15, 2026, 1:17 AM
Severity
Important
Public date
Aug 24, 2023, 12:00 AM