Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52880

tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc

Description

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADMIN to do that.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to < 7d303dee473ba3529d75b63491e9963342107bedaffected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to < 7a529c9023a197ab3bf09bb95df32a3813f7ba58affected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to < ada28eb4b9561aab93942f3224a2e41d76fe57faaffected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to < 2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43aaffected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to < 2b85977977cbd120591b23c2450e90a5806a7167affected
  • e1eaea46bb4020b38a141b84f88565d4603f8dd0 to < 67c37756898a5a6b2941a13ae7260c89b54e0d88affected

Linux Linux

Default version status: affected

  • 2.6.35affected
  • 0 to < 2.6.35unaffected
  • 4.19.312 to ≤ 4.19.*unaffected
  • 5.4.274 to ≤ 5.4.*unaffected
  • 5.10.215 to ≤ 5.10.*unaffected
  • 5.15.155 to ≤ 5.15.*unaffected
  • 6.1.86 to ≤ 6.1.*unaffected
  • 6.6 to ≤ *unaffected

References