CVEvulnerability
CVE-2023-2006
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-04-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-362
Description
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Affected configurations
• linux linux kernel (>= 5.10 < 5.10.157)
• linux linux kernel (>= 5.11 < 5.15.81)
• linux linux kernel (>= 5.16 < 6.0.11)
• netapp hci baseboard management controller h300s
• netapp hci baseboard management controller h410c
• netapp hci baseboard management controller h410s
• netapp hci baseboard management controller h500s
• netapp hci baseboard management controller h700s
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2189112 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/3bcd6c7eaa53 Patch
- https://security.netapp.com/advisory/ntap-20230609-0004/ Patch, Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-23-439/ Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=2189112 Issue Tracking, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/3bcd6c7eaa53 Patch
- https://security.netapp.com/advisory/ntap-20230609-0004/ Patch, Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-23-439/ Third Party Advisory, VDB Entry