What’s Vulnerable › Vulnerabilities

CVE-2023-53540: wifi: cfg80211: reject auth/assoc to AP with our address

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-04 · updated 2026-10-15

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

Affected products

• Linux kernel: from 2.6.32 before 6.1.55; from 6.2 before 6.5.5 — fixed in 6.1.55, 6.5.5

How to fix

Upgrade to a fixed version: Linux kernel 6.1.55, 6.5.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/07added2c6cd63de047bc786b39436322abb67c0
• https://git.kernel.org/stable/c/5d4e04bf3a0f098bd9033de3a5291810fa14c7a6
• https://git.kernel.org/stable/c/676a423410131d111a264d29aecbe6aadd57fb22

Get alerted when CVE-2023-53540 or the next vulnerability affects your stack