CVE-2023-53186: linux kernel from 5.15 (inclusive), before 5.15.108 (exclusive), from 5.16 (inclusive), before 6.1.25 (exclusive)…

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.108 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.25 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.2.12 (exclusive)
linux

linux kernel · 6.3 · update rc1
linux

linux kernel · 6.3 · update rc2
linux

linux kernel · 6.3 · update rc3
linux

linux kernel · 6.3 · update rc4
linux

linux kernel · 6.3 · update rc5
linux

linux kernel · 6.3 · update rc6
linux

Linux · 53e0961da1c7bbdabd1abebb20de403ec237ec09 to before 906a6689bb0191ad2a44131a3377006aa098af59, 53e0961da1c7bbdabd1abebb20de403ec237ec09 to before 71850b5af92da21b4862a9bc55bda61091247d00, 53e0961da1c7bbdabd1abebb20de403ec237ec09 to before 5f692c992a3bb9a8018e3488098b401a4229e7ec, 53e0961da1c7bbdabd1abebb20de403ec237ec09 to before 0646dc31ca886693274df5749cd0c8c1eaaeb5ca
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: net/core/skbuff.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.