Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-54065

net: dsa: realtek: fix out-of-bounds access

High7.8EPSS 0.15%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: fix out-of-bounds access The probe function sets priv->chip_data to (void *)priv + sizeof(*priv) with the expectation that priv has enough trailing space. However, only realtek-smi actually allocated this chip_data space. Do likewise in realtek-mdio to fix out-of-bounds accesses. These accesses likely went unnoticed so far, because of an (unused) buf[4096] member in struct realtek_priv, which caused kmalloc to round up the allocated buffer to a big enough size, so nothing of value was overwritten. With a different allocator (like in the barebox bootloader port of the driver) or with KASAN, the memory corruption becomes quickly apparent.

Scores

CVSS scores of CVE-2023-54065, by who scored it
Scored byCVSSScoreVector
LinuxCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.15% · top 96% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Linux · Linux

    • affected aac94001067da183455d6d37959892744fa01d9d – < cc0f9bb99735d2b68fac68f37b585d615728ce5b
    • affected aac94001067da183455d6d37959892744fa01d9d – < fe668aa499b4b95425044ba11af9609db6ecf466
    • affected aac94001067da183455d6d37959892744fa01d9d – < b93eb564869321d0dffaf23fcc5c88112ed62466

  • Linux · Linux

    • affected 5.18
    • unaffected < 5.18
    • unaffected 6.1.23 – ≤ 6.1.*
    • unaffected 6.2.10 – ≤ 6.2.*
    • unaffected 6.3 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-54065 badge
[![CVE-2023-54065](https://trackcve.app/badge/CVE-2023-54065.svg)](https://trackcve.app/cve/CVE-2023-54065)

Record last updated .