CVE-2023-53635: linux kernel from 4.4 (inclusive), before 6.1.28 (exclusive), from 6.2 (inclusive), before 6.2.15 (exclusive), from…

Affected technology

linux kernel · from 4.4 (inclusive), before 6.1.28 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.2.15 (exclusive)
linux

linux kernel · from 6.3 (inclusive), before 6.3.2 (exclusive)
linux

Linux · a4b4766c3cebb4018167e06b863d8e95b7274757 to before 80c5ba0078e20d926d11d0778f9a43902664ebf0, a4b4766c3cebb4018167e06b863d8e95b7274757 to before ff5e4ac8dd7be7f1faba955c5779a68571eeb0f8, a4b4766c3cebb4018167e06b863d8e95b7274757 to before f612ae1ab4793701caf39386fb3b7f4b3ef44e48, a4b4766c3cebb4018167e06b863d8e95b7274757 to before 73db1b8f2bb6725b7391e85aab41fdf592b3c0c1
Linux

Linux · 4.4
Linux

Component: Not specified by the source
File: include/net/netfilter/nf_conntrack_core.h, net/netfilter/nf_conntrack_netlink.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.