Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2006

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

Published

2023-04-24T21:15:09.283

Last Modified

2025-04-23T17:16:28.713

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.0 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-362
  • Type: Primary
    CWE-362
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel < 5.10.157 Yes
Operating System linux linux_kernel < 5.15.81 Yes
Operating System linux linux_kernel < 6.0.11 Yes
Application netapp hci_baseboard_management_controller h300s Yes
Application netapp hci_baseboard_management_controller h410c Yes
Application netapp hci_baseboard_management_controller h410s Yes
Application netapp hci_baseboard_management_controller h500s Yes
Application netapp hci_baseboard_management_controller h700s Yes
References