CVE-2023-45871

2023-10-1500:00:00

ubuntu.com

cve-2023-45871

igb driver

linux kernel

buffer size inadequacy

mtu

bugzilla

redhat

suse

launchpad

ethtool

interface

non default feature

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

JSON

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the
IGB driver in the Linux kernel before 6.5.3. A buffer size may not be
adequate for frames larger than the MTU.

Bugs

Notes

Author	Note
	Priority reason: This requires a non default feature to be set on the interface.
cascardo	this requires ethtool -K ethX rx-all on

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-220.231UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-167.184UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-89.99UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-37.38UNKNOWN
ubuntu24.04noarchlinux< anyUNKNOWN
ubuntu16.04noarchlinux< 4.4.0-248.282UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1163.176UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1114.124UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1050.55UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1016.16UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-220.231	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-167.184	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-89.99	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-37.38	UNKNOWN
ubuntu	24.04	noarch	linux	< any	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-248.282	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1163.176	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1114.124	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1050.55	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1016.16	UNKNOWN