CVE-2023-53619: linux kernel from 3.6 (inclusive), before 4.14.322 (exclusive), from 4.15 (inclusive), before 4.19.291 (exclusive)…

Affected technology

linux kernel · from 3.6 (inclusive), before 4.14.322 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.291 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.251 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.188 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.121 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.39 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.4.4 (exclusive)
linux

linux kernel · 6.5 · update rc1
linux

Linux · 12f7a505331e6b2754684b509f2ac8f0011ce644 to before 4ee69c91cb8f9ca144bc0861969e5a1a3c6152a7, 12f7a505331e6b2754684b509f2ac8f0011ce644 to before 00716f25f9697d02a0d9bd622575c7c7321ba3d0, 12f7a505331e6b2754684b509f2ac8f0011ce644 to before 61c7a5256543ae7d24cd9d21853d514c8632e1e9, 12f7a505331e6b2754684b509f2ac8f0011ce644 to before 8289d422f5e484efe4a565fe18e862ecd621c175, 12f7a505331e6b2754684b509f2ac8f0011ce644 to before 6f03ce2f1abcb9f9d0511e3659ca6eb60e39f566, 12f7a505331e6b2754684b509f2ac8f0011ce644 to before 05561f822f27b9fa88fa5504ddec34bf38833034, 12f7a505331e6b2754684b509f2ac8f0011ce644 to before fce5cc7cbd4b92f979bf02c9ec5fb69aaeba92d7, 12f7a505331e6b2754684b509f2ac8f0011ce644 to before 6eef7a2b933885a17679eb8ed0796ddf0ee5309b
Linux

Linux · 3.6
Linux

Component: Not specified by the source
File: net/netfilter/nf_conntrack_helper.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.