Vulnerability-Lookup

CVE-2023-53321 (GCVE-0-2023-53321)

Vulnerability from cvelistv5 – Published: 2025-09-16 16:11 – Updated: 2026-08-05 09:13

Title

wifi: mac80211_hwsim: drop short frames

Summary

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid accessing invalid memory if shorter frames are passed in.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-14 18:27 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/3beb97bed860d95b1…
https://git.kernel.org/stable/c/672205c6f2d11978f…
https://git.kernel.org/stable/c/c64ee9dd335832d5e…
https://git.kernel.org/stable/c/b9a175e3b250b0dc6…
https://git.kernel.org/stable/c/89a41ed7f21476301…
https://git.kernel.org/stable/c/fba360a047d5eeeb9…

Impacted products

2 products

Vendor	Product	Version	CPE status
Linux	Linux	Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < 3beb97bed860d95b14ad23578ce8ddaea62023db (git) Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < 672205c6f2d11978fcd7f0f336bb2c708e28874b (git) Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < c64ee9dd335832d5e2ab0a8fc83a34ad4c729799 (git) Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < b9a175e3b250b0dc6e152988040aa5014e98e61e (git) Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < 89a41ed7f21476301659ebd25ccb48a60791c1a7 (git) Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6 (git)	guessed
Linux	Linux	Affected: 5.4 Unaffected: 0 , < 5.4 (semver) Unaffected: 5.4.257 , ≤ 5.4.* (semver) Unaffected: 5.10.197 , ≤ 5.10.* (semver) Unaffected: 5.15.133 , ≤ 5.15.* (semver) Unaffected: 6.1.55 , ≤ 6.1.* (semver) Unaffected: 6.5.5 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:27:28.261822Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T18:32:58.479Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3beb97bed860d95b14ad23578ce8ddaea62023db",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "672205c6f2d11978fcd7f0f336bb2c708e28874b",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "c64ee9dd335832d5e2ab0a8fc83a34ad4c729799",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "b9a175e3b250b0dc6e152988040aa5014e98e61e",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "89a41ed7f21476301659ebd25ccb48a60791c1a7",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.197",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.133",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.257",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.197",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.133",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.55",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.5",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: drop short frames\n\nWhile technically some control frames like ACK are shorter and\nend after Address 1, such frames shouldn\u0027t be forwarded through\nwmediumd or similar userspace, so require the full 3-address\nheader to avoid accessing invalid memory if shorter frames are\npassed in."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached via the MAC80211_HWSIM generic netlink HWSIM_CMD_FRAME command (sendmsg on a local genetlink socket into hwsim_cloned_frame_received_nl), not via on-air Wi\u2011Fi frames or a remote network protocol; virtio is an alternate local/VM-test path, still not Network/Adjacent.\nAC:L - Once the attacker is the registered wmediumd for a radio (or virtio mode is enabled), they fully control HWSIM_ATTR_FRAME length and can reliably send a frame shorter than sizeof(struct ieee80211_hdr_3addr) with no race or other attacker-uncontrollable condition.\nPR:L - HWSIM_CMD_FRAME itself has no genl capability flag, but injecting frames requires being the registered wmediumd; HWSIM_CMD_REGISTER (and NEW_RADIO) use GENL_UNS_ADMIN_PERM, which is CAP_NET_ADMIN in the caller\u0027s user_ns and is obtainable by an unprivileged user via user+net namespaces.\nUI:N - The attacker triggers the path entirely with their own netlink REGISTER/NEW_RADIO and FRAME messages; no separate victim action is required.\nS:U - The invalid read and any resulting fault stay inside the host kernel mac80211_hwsim/mac80211 authority and do not cross a VM, IOMMU, or sandbox boundary on the primary netlink attack path.\nC:H - Short frames cause mac80211_hwsim_rx to read hdr-\u003eaddr1/addr2 past the copied skb payload into uninitialized/out-of-bounds skb-head heap memory (KMSAN uninit-value), which is an OOB read of kernel memory and scores Confidentiality High under the OOB-read guidance.\nI:N - The defect is a read of uninitialized/past-end frame header bytes only; there is no OOB write, UAF, or other integrity or control-flow corruption primitive, and mac80211 later length-checks before further parsing.\nA:H - Accessing past the valid frame data into invalid skb memory can produce a kernel fault/oops under memory debugging or tight allocations (as reflected by the sanitizer finding that motivated the fix), so Availability is scored High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:13:30.113Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db"
        },
        {
          "url": "https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e"
        },
        {
          "url": "https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6"
        }
      ],
      "title": "wifi: mac80211_hwsim: drop short frames",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53321",
    "datePublished": "2025-09-16T16:11:57.206Z",
    "dateReserved": "2025-09-16T16:08:59.563Z",
    "dateUpdated": "2026-08-05T09:13:30.113Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53321",
      "date": "2026-09-16",
      "epss": "0.00149",
      "percentile": "0.04475"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53321\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-16T17:15:38.173\",\"lastModified\":\"2026-06-17T06:44:52.993\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: mac80211_hwsim: drop short frames\\n\\nWhile technically some control frames like ACK are shorter and\\nend after Address 1, such frames shouldn\u0027t be forwarded through\\nwmediumd or similar userspace, so require the full 3-address\\nheader to avoid accessing invalid memory if shorter frames are\\npassed in.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/wireless/virtual/mac80211_hwsim.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"3beb97bed860d95b14ad23578ce8ddaea62023db\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"672205c6f2d11978fcd7f0f336bb2c708e28874b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"b9a175e3b250b0dc6e152988040aa5014e98e61e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"89a41ed7f21476301659ebd25ccb48a60791c1a7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/wireless/virtual/mac80211_hwsim.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.257\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.197\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.133\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.55\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.5\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-14T18:27:28.261822Z\",\"id\":\"CVE-2023-53321\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.4.257\",\"matchCriteriaId\":\"5189D8C7-0B76-4ACB-930C-2CEC2C2C7D8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.197\",\"matchCriteriaId\":\"FD17EA9A-DF74-4876-AADC-C204F0716961\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.133\",\"matchCriteriaId\":\"21236FF3-9B2C-4C1A-8780-BC5BCA44AA51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.55\",\"matchCriteriaId\":\"0EFCF8E8-5528-46B9-8C17-B09792899CE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.5.5\",\"matchCriteriaId\":\"8CF71E85-DA24-4925-95C5-E5C15DA71AE6\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-29T22:17:36+00:00",
      "cve": "CVE-2023-53321",
      "id": "CVE-2023-53321",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "279",
      "product_status:known_affected": "70",
      "product_status:known_not_affected": "118",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: wifi: mac80211_hwsim: drop short frames",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53321.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-11T02:22:06Z",
      "cve": "CVE-2023-53321",
      "id": "CVE-2023-53321",
      "initial_release_date": "2025-09-16T23:29:29Z",
      "product_status:known_affected": "489",
      "product_status:known_not_affected": "38",
      "product_status:recommended": "689",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53321",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53321.json",
      "version": "64"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-53321\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-14T18:27:28.261822Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-14T18:27:24.184Z\"}}], \"cna\": {\"title\": \"wifi: mac80211_hwsim: drop short frames\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"3beb97bed860d95b14ad23578ce8ddaea62023db\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"672205c6f2d11978fcd7f0f336bb2c708e28874b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"b9a175e3b250b0dc6e152988040aa5014e98e61e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"89a41ed7f21476301659ebd25ccb48a60791c1a7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/net/wireless/virtual/mac80211_hwsim.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.4\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.4\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.4.257\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.197\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.133\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.55\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/wireless/virtual/mac80211_hwsim.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db\"}, {\"url\": \"https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b\"}, {\"url\": \"https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\"}, {\"url\": \"https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e\"}, {\"url\": \"https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7\"}, {\"url\": \"https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: mac80211_hwsim: drop short frames\\n\\nWhile technically some control frames like ACK are shorter and\\nend after Address 1, such frames shouldn\u0027t be forwarded through\\nwmediumd or similar userspace, so require the full 3-address\\nheader to avoid accessing invalid memory if shorter frames are\\npassed in.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.257\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.197\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.133\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.55\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.5\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6\", \"versionStartIncluding\": \"5.4\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-01-05T10:19:26.112Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-53321\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-14T18:32:58.479Z\", \"dateReserved\": \"2025-09-16T16:08:59.563Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-09-16T16:11:57.206Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2023-53321

Vulnerability from fkie_nvd - Published: 2025-09-16 17:15 - Updated: 2026-06-17 06:44

Severity

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Summary

References

URL	Tags
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6	Patch

Impacted products

Vendor	Product	Version
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3beb97bed860d95b14ad23578ce8ddaea62023db",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "672205c6f2d11978fcd7f0f336bb2c708e28874b",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "c64ee9dd335832d5e2ab0a8fc83a34ad4c729799",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "b9a175e3b250b0dc6e152988040aa5014e98e61e",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "89a41ed7f21476301659ebd25ccb48a60791c1a7",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.197",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.133",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5189D8C7-0B76-4ACB-930C-2CEC2C2C7D8C",
              "versionEndExcluding": "5.4.257",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD17EA9A-DF74-4876-AADC-C204F0716961",
              "versionEndExcluding": "5.10.197",
              "versionStartIncluding": "5.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "21236FF3-9B2C-4C1A-8780-BC5BCA44AA51",
              "versionEndExcluding": "5.15.133",
              "versionStartIncluding": "5.11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EFCF8E8-5528-46B9-8C17-B09792899CE0",
              "versionEndExcluding": "6.1.55",
              "versionStartIncluding": "5.16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CF71E85-DA24-4925-95C5-E5C15DA71AE6",
              "versionEndExcluding": "6.5.5",
              "versionStartIncluding": "6.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: drop short frames\n\nWhile technically some control frames like ACK are shorter and\nend after Address 1, such frames shouldn\u0027t be forwarded through\nwmediumd or similar userspace, so require the full 3-address\nheader to avoid accessing invalid memory if shorter frames are\npassed in."
    }
  ],
  "id": "CVE-2023-53321",
  "lastModified": "2026-06-17T06:44:52.993",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-53321",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-01-14T18:27:28.261822Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-09-16T17:15:38.173",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-G75G-RHJ6-FWRR

Vulnerability from github – Published: 2025-09-16 18:31 – Updated: 2025-12-10 21:31

Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211_hwsim: drop short frames

While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid accessing invalid memory if shorter frames are passed in.

Severity

7.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-53321"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-09-16T17:15:38Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: drop short frames\n\nWhile technically some control frames like ACK are shorter and\nend after Address 1, such frames shouldn\u0027t be forwarded through\nwmediumd or similar userspace, so require the full 3-address\nheader to avoid accessing invalid memory if shorter frames are\npassed in.",
  "id": "GHSA-g75g-rhj6-fwrr",
  "modified": "2025-12-10T21:31:28Z",
  "published": "2025-09-16T18:31:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53321"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

RHSA-2024:2394

Vulnerability from csaf_redhat - Published: 2024-04-30 09:57 - Updated: 2026-09-11 09:26

Summary

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Severity

Important

Scope

341 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Fixed: 279 products

https://access.redhat.com/errata/RHSA-2024:2394

Open the full advisory

SUSE-SU-2025:03600-1

Vulnerability from csaf_suse - Published: 2025-10-15 12:54 - Updated: 2025-10-15 12:54

Summary

Security update for the Linux Kernel

Severity

Important

Scope

346 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 174 products

Open the full advisory

SUSE-SU-2025:03613-1

Vulnerability from csaf_suse - Published: 2025-10-16 05:47 - Updated: 2025-10-16 05:47

Summary

Security update for the Linux Kernel

Severity

Important

Scope

79 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 4 products

Open the full advisory

SUSE-SU-2025:03614-1

Vulnerability from csaf_suse - Published: 2025-10-16 05:48 - Updated: 2025-10-16 05:48

Summary

Security update for the Linux Kernel

Severity

Important

Scope

183 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 56 products

Open the full advisory

SUSE-SU-2025:03615-1

Vulnerability from csaf_suse - Published: 2025-10-16 05:49 - Updated: 2025-10-16 05:49

Summary

Security update for the Linux Kernel

Severity

Important

Scope

378 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 134 products

Open the full advisory

SUSE-SU-2025:03626-1

Vulnerability from csaf_suse - Published: 2025-10-17 06:14 - Updated: 2025-10-17 06:14

Summary

Security update for the Linux Kernel

Severity

Important

Scope

84 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 133 products

Open the full advisory

SUSE-SU-2025:03628-1

Vulnerability from csaf_suse - Published: 2025-10-17 11:34 - Updated: 2025-10-17 11:34

Summary

Security update for the Linux Kernel

Severity

Important

Scope

326 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 139 products

Open the full advisory

SUSE-SU-2025:03634-1

Vulnerability from csaf_suse - Published: 2025-10-17 14:32 - Updated: 2025-10-17 14:32

Summary

Security update for the Linux Kernel

Severity

Important

Scope

445 vulnerabilities in this advisory, including CVE-2023-53321.

CVE-2023-53321

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 33 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-53321 (GCVE-0-2023-53321)

Tags

Sightings

Nomenclature

Related by attack behaviour