---
id: CVE-2023-53540
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: cfg80211: reject auth/assoc to AP with our address

  If the AP uses our own address as its MLD address or BSSID, then
  clearly something's wrong
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: cfg80211: reject auth/assoc to AP with our address

  If the AP uses our own address as its MLD address or BSSID, then
  clearly something's wrong. Reject such connec…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 2.6.32, < 6.1.55'
  - 'linux_kernel >= 6.2, < 6.5.5'
patched:
  - linux_kernel 6.5.5
published: '2025-10-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:42.610'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53540'
references:
  - url: 'https://git.kernel.org/stable/c/07added2c6cd63de047bc786b39436322abb67c0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5d4e04bf3a0f098bd9033de3a5291810fa14c7a6'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/676a423410131d111a264d29aecbe6aadd57fb22'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00198
epssPercentile: 0.09511
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-15T21:35:31.319969Z'
ingestedAt: '2026-10-15T22:48:25.408Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: reject auth/assoc to AP with our address

If the AP uses our own address as its MLD address or BSSID, then
clearly something's wrong. Reject such connections so we don't
try and fail later.

## Affected

- `linux_kernel >= 2.6.32, < 6.1.55`
- `linux_kernel >= 6.2, < 6.5.5`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.5.5`