CVE-2023-52880 — Resource Injection in Linux
Severity
5.5MEDIUMNVD
OSV7.8OSV7.0
EPSS
0.0%
top 97.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 24
Latest updateMar 26
Description
In the Linux kernel, the following vulnerability has been resolved:
tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
Any unprivileged user can attach N_GSM0710 ldisc, but it requires
CAP_NET_ADMIN to create a GSM network anyway.
Require initial namespace CAP_NET_ADMIN to do that.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linuxe1eaea46bb4020b38a141b84f88565d4603f8dd0 — 7d303dee473ba3529d75b63491e9963342107bed+6
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
27OSV▶
linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-kvm, linux-oracle vulnerabilities↗2025-03-11
📋Vendor Advisories
28💬Community
1Bugzilla
▶