CVEvulnerability
CVE-2023-6200
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-01-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-362
Description
A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution.
Affected configurations
• linux linux kernel (< 6.7)
• linux linux kernel 6.7
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://access.redhat.com/security/cve/CVE-2023-6200 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2250377 Issue Tracking, Patch
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dade3f6a1e4e Mailing List, Patch
- https://access.redhat.com/security/cve/CVE-2023-6200 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2250377 Issue Tracking, Patch
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dade3f6a1e4e Mailing List, Patch