CVE-2023-52880

tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

Description

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADMIN to do that.

N/A

CVSS

Severity:

EPSS 0.20%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed
https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58
https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa
https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a
https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167
https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

Frequently Asked Questions

What is the severity of CVE-2023-52880?: CVE-2023-52880 has not yet been assigned a CVSS score.
How to fix CVE-2023-52880?: To fix CVE-2023-52880, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-52880 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-52880 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-52880?: CVE-2023-52880 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.