Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability
Priority LOW 39CWE-362Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02024 81st percentileScored 2026-11-07
Fix Fixed kernel: 6.7-rc7
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | kernel | — | 6.7-rc7 | Patch available | CNA |
| — | kernel | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | Not affected | CNA |
| Red Hat | Red Hat Virtualization 4 | — | — | Not affected | CNA |
| Fedora | Fedora | — | — | No fix listed | CNA |
- kernel Vendor— Affected — Fixed in 6.7-rc7 Patch available CNA
- kernel Vendor— Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Virtualization 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Fedora VendorFedora Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | before 6.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:* | 6.7 rc1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:* | 6.7 rc2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:* | 6.7 rc3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:* | 6.7 rc4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:* | 6.7 rc5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:* | 6.7 rc6 | Vulnerable | Linux |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions before 6.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:* Versions 6.7 rc1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:* Versions 6.7 rc2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:* Versions 6.7 rc3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:* Versions 6.7 rc4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:* Versions 6.7 rc5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:* Versions 6.7 rc6 Vulnerable ·Linux
Remediation
- Fix · CNA kernel Fixed in 6.7-rc7
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 5 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Virtualization 4
Timeline
- 2026-10-02 Threatist record created from CVE-2023-6200
- 2026-10-03 Alias added: GHSA-ghww-f45r-4r4w
References
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-6200 · CVE Program
- CVE-2023-6200 · NVD
- FIRST EPSS
- GHSA-ghww-f45r-4r4w · GitHub Advisory Database · CC BY 4.0
- CVE-2023-6200 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences