CVE-2023-53072: linux kernel from 5.7 (inclusive), before 6.1.22 (exclusive), from 6.2 (inclusive), before 6.2.8 (exclusive), 6.3 ·…

Affected technology

linux kernel · from 5.7 (inclusive), before 6.1.22 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.2.8 (exclusive)
linux

linux kernel · 6.3 · update rc1
linux

linux kernel · 6.3 · update rc2
linux

Linux · 58b09919626bf9067345289212ec030c61eb1034 to before 2827f099b3fb9a59263c997400e9182f5d423e84, 58b09919626bf9067345289212ec030c61eb1034 to before 804cf487fb0031f3c74755b78d8663333f0ba636, 58b09919626bf9067345289212ec030c61eb1034 to before b6985b9b82954caa53f862d6059d06c0526254f0
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: net/mptcp/protocol.c, net/mptcp/protocol.h, net/mptcp/subflow.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.