CVE-2023-53540 wifi: cfg80211: reject auth/assoc to AP with our address
The Linux kernel Wi-Fi subsystem fails to reject connections to access points using the client's own address, potentially causing connection failures.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53540?
CVE-2023-53540 is a high-severity vulnerability in Linux kernel, published on 4 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: reject auth/assoc to AP with our address
If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.
Which versions are affected by CVE-2023-53540?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53540?
Apply the vendor's patch.
Is CVE-2023-53540 being exploited?
There is no known exploitation of CVE-2023-53540 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-77399, BELL-CVE-2023-53540, DEBIAN-CVE-2023-53540, GHSA-83qc-9rcf-r226, ROOT-OS-DEBIAN-11-CVE-2023-53540, ROOT-OS-UBUNTU-2204-CVE-2023-53540 and 1 more.