CVE-2023-52880

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52880
In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can attach N_GSM0710 ldisc, but it requires CAP_NET_ADMIN to create a GSM network anyway. Require initial namespace CAP_NET_ADMIN to do that.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167 Patch
https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a Patch
https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88 Patch
https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58 Patch
https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed Patch
https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa Patch
https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167 Patch
https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a Patch
https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88 Patch
https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58 Patch
https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed Patch
https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Third Party Advisory Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Third Party Advisory Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

17 Dec 2025, 03:31

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167 - () https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167 - Patch
References () https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a - () https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a - Patch
References () https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88 - () https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88 - Patch
References () https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58 - () https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58 - Patch
References () https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed - () https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed - Patch
References () https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa - () https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Third Party Advisory, Mailing List
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Third Party Advisory, Mailing List
First Time Linux
Debian
Debian debian Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 08:40

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167 - () https://git.kernel.org/stable/c/2b85977977cbd120591b23c2450e90a5806a7167 -
References () https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a - () https://git.kernel.org/stable/c/2d154a54c58f9c8375bfbea9f7e51ba3bfb2e43a -
References () https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88 - () https://git.kernel.org/stable/c/67c37756898a5a6b2941a13ae7260c89b54e0d88 -
References () https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58 - () https://git.kernel.org/stable/c/7a529c9023a197ab3bf09bb95df32a3813f7ba58 -
References () https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed - () https://git.kernel.org/stable/c/7d303dee473ba3529d75b63491e9963342107bed -
References () https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa - () https://git.kernel.org/stable/c/ada28eb4b9561aab93942f3224a2e41d76fe57fa -

04 Nov 2024, 13:16

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 22:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: n_gsm: requiere CAP_NET_ADMIN para adjuntar el ldisc N_GSM0710. Cualquier usuario sin privilegios puede adjuntar el ldisc N_GSM0710, pero de todos modos requiere CAP_NET_ADMIN para crear una red GSM. Requiere el espacio de nombres inicial CAP_NET_ADMIN para hacer eso.
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

24 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-24 16:15

Updated : 2025-12-17 03:31

NVD link : CVE-2023-52880

Mitre link : CVE-2023-52880

CVE.ORG link : CVE-2023-52880

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
NVD-CWE-noinfo