Race condition in Linux kernel's RxRPC network protocol
Priority LOW 33CWE-362Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00363 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Linux kernel's RxRPC network protocol | Fixed in kernel v6.1-rc7 | — | No fix listed | CNA |
- Linux kernel's RxRPC network protocol Vendor— Affected Fixed in kernel v6.1-rc7 Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.10 to before 5.10.157; 5.11 to before 5.15.81; 5.16 to before 6.0.11 | Vulnerable | Linux |
| cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:* | h300s | Vulnerable | NetApp |
| cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:* | h410c | Vulnerable | NetApp |
| cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:* | h410s | Vulnerable | NetApp |
| cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:* | h500s | Vulnerable | NetApp |
| cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:* | h700s | Vulnerable | NetApp |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 5.10 to before 5.10.157; 5.11 to before 5.15.81; 5.16 to before 6.0.11 Vulnerable ·Linux
- cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:* Versions h300s Vulnerable ·NetApp
- cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:* Versions h410c Vulnerable ·NetApp
- cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:* Versions h410s Vulnerable ·NetApp
- cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:* Versions h500s Vulnerable ·NetApp
- cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:* Versions h700s Vulnerable ·NetApp
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 4 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
Timeline
- 2026-10-02 Threatist record created from CVE-2023-2006
- 2026-10-03 Alias added: GHSA-pvxc-v7pp-fmx4
References
Sources
- CVE-2023-2006 · CVE Program
- CVE-2023-2006 · NVD
- FIRST EPSS
- GHSA-pvxc-v7pp-fmx4 · GitHub Advisory Database · CC BY 4.0
- CVE-2023-2006 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences