HIGH 7.0 Microsoft
CVE-2023-2006
A race condition was found in the Linux kernel's RxRPC network protocol within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Microsoft Security Update 2023-Apr: A race condition was found in the Linux kernel's RxRPC network protocol within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Affected Products
- cm1 kernel 5.10.181.1-1 on CBL Mariner 1.0
- cbl2 kernel 5.15.111.1-1 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2006
- https://nvd.nist.gov/vuln/detail/CVE-2023-2006
This high severity vulnerability with a CVSS score of 7.0 was published on 2023-04-11 via Microsoft. Affected: cm1 kernel 5.10.181.1-1 on CBL Mariner 1.0, cbl2 kernel 5.15.111.1-1 on CBL Mariner 2.0.
vulnfeed aggregates 16756 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.