CVE-2023-53557: linux kernel from 5.18 (inclusive), before 6.1.40 (exclusive), from 6.2 (inclusive), before 6.4.5 (exclusive), 6.5 ·…

Affected technology

linux kernel · from 5.18 (inclusive), before 6.1.40 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.4.5 (exclusive)
linux

linux kernel · 6.5 · update rc1
linux

Linux · 5b0ab78998e32564a011b14c4c7f9c81e2d42b9d to before ce3ec57faff559ccae1e0150c1f077eb2df648a4, 5b0ab78998e32564a011b14c4c7f9c81e2d42b9d to before 03d63255a5783243c110aec5e6ae2f1475c3be76, 5b0ab78998e32564a011b14c4c7f9c81e2d42b9d to before 5f81018753dfd4989e33ece1f0cb6b8aae498b82
Linux

Linux · 5.18
Linux

Component: Not specified by the source
Function: we
File: kernel/trace/fprobe.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.