Linux Kernel LAN78XX USB Network Driver Memory Leak Vulnerability

A vulnerability in the Linux kernel's LAN78XX USB network driver could lead to a memory leak of kernel contents. This issue arises because the packet length retrieved from the descriptor may exceed the actual length of the socket buffer. As a result, the cloned socket buffer passed up the network stack can inadvertently leak kernel memory. Additionally, this vulnerability allows for an integer underflow when the size is less than the Ethernet Frame Check Sequence length.

Impact

Exploitation of this vulnerability can cause unintended leakage of kernel memory contents, which could potentially be exploited to access sensitive information or manipulate kernel operations.