CVE-2023-53540

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: reject auth/assoc to AP with our address

If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

A flaw in cfg80211 allowed authentication or association attempts to an access point using the device’s own MAC address, leading to kernel instability or denial of service. The issue is not remotely exploitable and requires the ability to issue crafted nl80211 netlink commands — therefore for the CVSS the PR:H (high privileges) applies.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.