CVE-2023-45862
Summary
| CVE | CVE-2023-45862 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-10-14 21:15:45 UTC |
| Updated | 2026-11-02 23:17:17 UTC |
| Description | An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation. |
Risk And Classification
Primary CVSS: v3.1 5.5 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.002820000 probability, percentile 0.208420000 (date 2026-11-03)
Problem Types: CWE-770 | n/a
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Application | Netapp | Active Iq Unified Manager | - | All | All | All |
| Hardware | Netapp | H410c | - | All | All | All |
| Operating System | Netapp | H410c Firmware | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5 | af854a3a-2127-422b-91ae-364da2661108 | cdn.kernel.org | Release Notes |
| security.netapp.com/advisory/ntap-20231116-0004 | af854a3a-2127-422b-91ae-364da2661108 | security.netapp.com | Third Party Advisory |
| kernel/git/torvalds/linux.git - Linux kernel source tree | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Mailing List, Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161211 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-13019)
- 199936 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6494-1)
- 199970 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6494-2)
- 199979 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6532-1)
- 242887 Red Hat Update for kernel-rt (RHSA-2024:0725)
- 242890 Red Hat Update for kernel (RHSA-2024:0724)
- 242908 Red Hat Update for kernel (RHSA-2024:0723)
- 243087 Red Hat Update for kernel (RHSA-2024:1404)
- 390293 Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2023-0025)
- 673534 EulerOS Security Update for kernel (EulerOS-SA-2024-1086)
- 673563 EulerOS Security Update for kernel (EulerOS-SA-2024-1144)
- 673595 EulerOS Security Update for kernel (EulerOS-SA-2023-3247)
- 673644 EulerOS Security Update for kernel (EulerOS-SA-2023-3336)
- 673692 EulerOS Security Update for kernel (EulerOS-SA-2023-3275)
- 673923 EulerOS Security Update for kernel (EulerOS-SA-2024-1062)
- 673995 EulerOS Security Update for kernel (EulerOS-SA-2024-1275)
- 674042 EulerOS Security Update for kernel (EulerOS-SA-2023-3304)
- 755235 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4377-1)
- 755249 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4414-1)
- 755563 SUSE Security Update for the linux kernel (SUSE-SU-2023:4351-1)
- 755564 SUSE Security Update for the linux kernel (SUSE-SU-2023:4348-1)
- 755565 SUSE Security Update for the linux kernel (SUSE-SU-2023:4347-1)
- 755566 SUSE Security Update for the linux kernel (SUSE-SU-2023:4345-1)
- 755567 SUSE Security Update for the linux kernel (SUSE-SU-2023:4343-1)
- 907600 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (31565-1)