NetSight
high7.8

CVE-2023-52880

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attac…

Impact

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADMIN to do that.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.312
from 4.20 before 5.4.274
from 5.5 before 5.10.215
from 5.11 before 5.15.155
from 5.16 before 6.1.86
from 6.2 before 6.6
DebianDebian Linux
Version 10.0

References