Vulnerability in Linux

CVE-2023-53540

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

EPSS: 0.001 (4.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H.

Affected products

References

Frequently asked questions

What is CVE-2023-53540?
CVE-2023-53540 is a high-severity vulnerability in Linux. CVSS score: 7.1/10. Published 2025-10-04.
How severe is CVE-2023-53540?
High severity. CVSS v3 base score is 7.1 out of 10.