In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADMIN to do that.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux
  • Rhel Eus

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.33.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:5928 2024-08-28T00:00:00Z
kernel-0:5.14.0-427.33.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:5928 2024-08-28T00:00:00Z
Red Hat Enterprise Linux 9.2 Extended Update Support
kernel-0:5.14.0-284.84.1.el9_2 cpe:/a:redhat:rhel_eus:9.2 RHSA-2024:6744 2024-09-18T00:00:00Z
kernel-rt-0:5.14.0-284.84.1.rt14.369.el9_2 cpe:/a:redhat:rhel_eus:9.2::nfv RHSA-2024:6745 2024-09-18T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167 cve-icon cve-icon
https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a cve-icon cve-icon
https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88 cve-icon cve-icon
https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58 cve-icon cve-icon
https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed cve-icon cve-icon
https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024052422-CVE-2023-52880-d2ff@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52880 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52880 cve-icon
History

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Tue, 05 Nov 2024 08:15:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 18 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.2
cpe:/a:redhat:rhel_eus:9.2::nfv
Vendors & Products Redhat rhel Eus

Wed, 28 Aug 2024 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-24T15:33:17.439Z

Updated: 2024-11-04T14:54:28.359Z

Reserved: 2024-05-21T15:35:00.781Z

Link: CVE-2023-52880

cve-icon Vulnrichment

Updated: 2024-08-02T23:18:41.167Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-24T16:15:10.033

Modified: 2024-11-21T08:40:47.160

Link: CVE-2023-52880

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-24T00:00:00Z

Links: CVE-2023-52880 - Bugzilla