CVEvulnerability

CVE-2023-2156

7.5 HIGH Published 2023-05-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-617

Description

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

Affected configurations

• linux linux kernel (>= 5.7 < 5.10.184) • linux linux kernel (>= 5.11 < 5.15.117) • linux linux kernel (>= 5.16 < 6.1.34) • linux linux kernel (>= 6.2 < 6.2.13) • linux linux kernel (>= 6.3 < 6.3.8) • redhat enterprise linux 9.0 • fedoraproject fedora 38 • debian debian linux 10.0

Related

Weakness · CWE (1)

  • CWE-617 Reachable Assertion weakness

References