CVE-2023-52880

low-risk
Published 2024-05-24

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADMIN to do that.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (2)

Affected Vendors

Debian Linux

References (14)

Patch https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167
Patch https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a
Patch https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88
Patch https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58
Patch https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed
Patch https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa
Patch https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167
Patch https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a
Patch https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88
Patch https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58
Patch https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed
Patch https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa
Mailing List https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Mailing List https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
25
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 7/34 · Low