CVE-2023-45862 Memory corruption in n/a
A memory corruption flaw in the Linux kernel ENE UB6250 USB reader driver allows attackers to potentially execute code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-45862?
CVE-2023-45862 is a medium-severity memory corruption vulnerability in Linux kernel, published on 14 Oct 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.
Weakness: CWE-770
Which versions are affected by CVE-2023-45862?
It affects 3 products.
Products include Linux kernel, Netapp Active Iq Unified Manager, Netapp H410c Firmware.
How do I fix CVE-2023-45862?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-45862 being exploited?
There is no known exploitation of CVE-2023-45862 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-31565, DEBIAN-CVE-2023-45862, GHSA-85cj-83mp-x2mm, OESA-2023-1769, OESA-2023-1770, UBUNTU-CVE-2023-45862.