Riskcovery

CVE-2023-52880

tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

State
Published
Severity
7.8 High
Published
May 24, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway.

Require initial namespace CAP_NET_ADMIN to do that.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to before 7d303dee473ba3529d75b63491e9963342107bedAffected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to before 7a529c9023a197ab3bf09bb95df32a3813f7ba58Affected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to before ada28eb4b9561aab93942f3224a2e41d76fe57faAffected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to before 2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43aAffected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to before 2b85977977cbd120591b23c2450e90a5806a7167Affected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to before 67c37756898a5a6b2941a13ae7260c89b54e0d88Affected
LinuxLinux
  • 2.6.35Affected
  • before 2.6.35Not affected
  • 4.19.312 through 4.19.*Not affected
  • 5.4.274 through 5.4.*Not affected
  • 5.10.215 through 5.10.*Not affected
  • 5.15.155 through 5.15.*Not affected
  • 6.1.86 through 6.1.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.