CVE-2023-53518: linux kernel from 4.7 (inclusive), before 4.14.326 (exclusive), from 4.15 (inclusive), before 4.19.295 (exclusive)…

Affected technology

linux kernel · from 4.7 (inclusive), before 4.14.326 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.295 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.257 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.195 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.132 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.53 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.4.16 (exclusive)
linux

linux kernel · from 6.5 (inclusive), before 6.5.3 (exclusive)
linux

Linux · 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 7462483446cb9986568ad7adae746ce5f18d2968, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 29811f4b8255d4238cf326f3bb7129784766beab, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before ab192e5e5d3b48415909a8408acfd007a607bcc0, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 111bafa210ae546bee7644be730c42df9c35b66e, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 8918025feb2f5f7c73f2495c158f22997e25cb02, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 1640e9c72173911ad0fddb05012c01eafe082c4e, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 3354c401c68d70567d1ef25d12f4e22a7813a3c6, 0fe3a66410a3ba96679be903f1e287d7a0a264a9 to before 5693d077595de721f9ddbf9d37f40e5409707dfe
Linux

Linux · 4.7
Linux

Component: Not specified by the source
File: drivers/devfreq/devfreq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.