Wind River Support Network

HomeDefectsLIN1021-5695
Fixed

LIN1021-5695 : Security Advisory - linux - CVE-2023-2006

Created: Apr 24, 2023    Updated: Apr 27, 2023
Resolved Date: Apr 26, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.17
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

CREATE(Triage):(User=admin) CVE-2023-2006 (https://nvd.nist.gov/vuln/detail/CVE-2023-2006)

CVEs


Live chat
Online