Riskcovery

CVE-2023-53540

wifi: cfg80211: reject auth/assoc to AP with our address

State
Published
Severity
7.1 High
Published
Oct 4, 2025
Updated
Oct 15, 2026
Reserved
Oct 4, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: reject auth/assoc to AP with our address

If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 19957bb399e2722719c0e20c9ae91cf8b6aaff04 to before 676a423410131d111a264d29aecbe6aadd57fb22Affected
  • 19957bb399e2722719c0e20c9ae91cf8b6aaff04 to before 07added2c6cd63de047bc786b39436322abb67c0Affected
  • 19957bb399e2722719c0e20c9ae91cf8b6aaff04 to before 5d4e04bf3a0f098bd9033de3a5291810fa14c7a6Affected
LinuxLinux
  • 2.6.32Affected
  • before 2.6.32Not affected
  • 6.1.55 through 6.1.*Not affected
  • 6.5.5 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.