CVE-2023-23559: Debian Linux

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 2.6.35, before 4.14.305 (fixed in 4.14.305); from 4.15, before 4.19.272 (fixed in 4.19.272); from 4.20, before 5.4.231 (fixed in 5.4.231); from 5.5, before 5.10.166 (fixed in 5.10.166); from 5.11, before 5.15.91 (fixed in 5.15.91); from 5.16, before 6.1.9 (fixed in 6.1.9)
• Netapp Hci Baseboard Management Controller: version h300s only; version h410c only; version h410s only; version h500s only; version h700s only

Published 2023-01-13. Last modified 2026-06-17.