CVE-2023-23559

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2023-23559
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2023-01-13 01:15:00 UTC
Updated2023-11-07 04:07:00 UTC
DescriptionIn rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

Risk And Classification

Problem Types: CWE-190

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Debian Debian Linux 10.0 All All All
Operating System Linux Linux Kernel All All All All
Operating System Linux Linux Kernel All All All All
Application Netapp Hci Baseboard Management Controller h300s All All All
Application Netapp Hci Baseboard Management Controller h410c All All All
Application Netapp Hci Baseboard Management Controller h410s All All All
Application Netapp Hci Baseboard Management Controller h500s All All All
Application Netapp Hci Baseboard Management Controller h700s All All All

References

ReferenceSourceLinkTags
[SECURITY] [DLA 3404-1] linux-5.10 security update MLIST lists.debian.org
[SECURITY] [DLA 3403-1] linux security update MLIST lists.debian.org
rndis_wlan: Prevent buffer overflow in rndis_query_oid - Patchwork MISC patchwork.kernel.org
CVE-2023-23559 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security CONFIRM security.netapp.com
rndis_wlan: Prevent buffer overflow in rndis_query_oid - Patchwork patchwork.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 160505 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12196)
  • 160541 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12242)
  • 160542 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12243)
  • 160551 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12256)
  • 160554 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12255)
  • 160572 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12323)
  • 181765 Debian Security Update for linux-5.10 (DLA 3404-1)
  • 181768 Debian Security Update for linux (DLA 3403-1)
  • 182208 Debian Security Update for linux (CVE-2023-23559)
  • 199218 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5927-1)
  • 199251 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5970-1)
  • 199254 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5978-1)
  • 199258 Ubuntu Security Notification for Linux kernel (HWE) Vulnerabilities (USN-5979-1)
  • 199259 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5980-1)
  • 199260 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5982-1)
  • 199261 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5984-1)
  • 199264 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5985-1)
  • 199265 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5987-1)
  • 199267 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-5991-1)
  • 199280 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6004-1)
  • 199289 Ubuntu Security Notification for Linux kernel (BlueField) Vulnerabilities (USN-6020-1)
  • 199295 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6031-1)
  • 199297 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6032-1)
  • 199300 Ubuntu Security Notification for Linux kernel (Qualcomm Snapdragon) Vulnerabilities (USN-6030-1)
  • 199405 Ubuntu Security Notification for Linux kernel (Xilinx ZynqMP) Vulnerabilities (USN-6151-1)
  • 199502 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5975-1)
  • 199541 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5924-1)
  • 199555 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5926-1)
  • 199570 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5981-1)
  • 199587 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-6009-1)
  • 199590 Ubuntu Security Notification for Linux kernel (AWS) Vulnerabilities (USN-5884-1)
  • 378468 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-20230042)
  • 378473 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2023:0021)
  • 378512 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0042)
  • 390285 Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2023-0017)
  • 390286 Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2023-0018)
  • 390292 Oracle Managed Virtualization (VM) Server for x86 Security Update for None (OVMSA-2023-0016)
  • 753801 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0762-1)
  • 753806 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0770-1)
  • 753807 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0768-1)
  • 753808 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0778-1)
  • 753810 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0780-1)
  • 753832 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0852-1)
  • 755123 SUSE Enterprise Linux Security Update for suse-module-tools (SUSE-SU-2023:4136-1)
  • 755124 SUSE Enterprise Linux Security Update for suse-module-tools (SUSE-SU-2023:4135-1)
  • 755128 SUSE Enterprise Linux Security Update for suse-module-tools (SUSE-SU-2023:4160-1)
  • 755129 SUSE Enterprise Linux Security Update for suse-module-tools (SUSE-SU-2023:4159-1)
  • 755130 SUSE Enterprise Linux Security Update for suse-module-tools (SUSE-SU-2023:4158-1)
  • 755632 SUSE Enterprise Linux Security Update for suse-module-tools (SUSE-SU-2024:0155-1)
  • 755842 SUSE Enterprise Linux Security Update for the linux kernel (SUSE-SU-2023:0774-1)
  • 905287 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13041)
  • 905294 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13052)
  • 905775 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13041-2)
  • 906299 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13052-2)
  • 906561 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13041-4)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report