CVE-2023-53189: linux kernel from 3.10.105 (inclusive), before 4.14.322 (exclusive), from 4.15 (inclusive), before 4.19.291…

Affected technology

linux kernel · from 3.10.105 (inclusive), before 4.14.322 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.291 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.251 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.188 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.121 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.40 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.4.5 (exclusive)
linux

linux kernel · 6.5 · update rc1
linux

Linux · b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before c6395e32935d35e6f935e7caf1c2dac5a95943b4, b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before df62fdcd004afa72ecbed0e862ebb983acd3aa57, b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before c7eeba47058532f6077d6a658e38b6698f6ae71a, b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before 2ad31ce40e8182860b631e37209e93e543790b7c, b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before 82abd1c37d3bf2a2658b34772c17a25a6f9cca42, b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before 436b7cc7eae7851c184b671ed7a4a64c750b86f7, b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before 1f656e483eb4733d62f18dfb206a49b78f60f495, b7b1bfce0bb68bd8f6e62a28295922785cc63781 to before 06a0716949c22e2aefb648526580671197151acc, 973d5956f754cfc306f5e274d71503498f4b0324, 3.10.105 to before 3.11
Linux

Linux · 3.11
Linux

Component: Not specified by the source
Function: addrconf_rs_timer
File: net/ipv6/addrconf.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.