Get real-time updates on Telegram
CVE-2023-53481: linux kernel from 2.6.25 (inclusive), before 4.14.308 (exclusive), from 4.15 (inclusive), before 4.19.276 (exclusive)…
CVE-2023-53481. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0016 (percentile 0.04688), scored 14-Oct-2026.
Affected technology
linux kernel · from 2.6.25 (inclusive), before 4.14.308 (exclusive)
linux
linux kernel · from 4.15 (inclusive), before 4.19.276 (exclusive)
linux
linux kernel · from 4.20 (inclusive), before 5.4.235 (exclusive)
linux
linux kernel · from 5.5 (inclusive), before 5.10.173 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.100 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.18 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.2.5 (exclusive)
linux
Linux · 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before b40d2fbf47af58377e898b5062077a47bb28a132, 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before f006f596fe851c3b6aae60b79f89f89f0e515d2f, 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before b5be23f6ae610bdb262160a1f294afee6d0e6a69, 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before 8a18856e074479bd050b01e688c58defadce7ab0, 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before 3afaaf6f5867dc4ad383808d4053f428ec7b867d, 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before cc4bc532acda66189bddc03b3fe1ad689d9a48a2, 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before 5af1c643184a5d09ff5b3f334077a4d0a163c677, 43f9b25a9cdd7b177f77f026b1461abd1abbd174 to before 4d57a7333e26040f2b583983e1970d9d460e56b0
Linux
Linux · 2.6.25
Linux
Component: Not specified by the source
File: drivers/mtd/ubi/wl.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-835
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.0016 · percentile 0.04688 · 2026-10-14
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2023-53481.html