CVE-2023-53540

CVE-2023-53540

High · published October 4, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: reject auth/assoc to AP with our address

If the AP uses our own address as its MLD address or BSSID, then

clearly something's wrong. Reject such connections so we don't

try and fail later.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.6th percentile
Published
2025-10-04T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.32, < 6.1.556.1.55
linux/linux_kernel≥ 6.2, < 6.5.56.5.5
References (3)
EPSS history
Timeline
  • 04 OCT 15:16Z
    wifi: cfg80211: reject auth/assoc to AP with our address
    cvelistv5