CVE-2023-2006CWE-362

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles

High · published April 24, 2023

CVSS v3.1
7.0
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00363 · 29.0th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2023-04-24T00:00Z
EPSS history
Timeline
  • 24 APR 00:00Z
    A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles
    cvelistv5