Wind River Support Network

HomeDefectsLIN1023-3
Fixed

LIN1023-3 : Security Advisory - linux - CVE-2023-2006

Created: Apr 25, 2023    Updated: Apr 17, 2024
Resolved Date: May 7, 2023
Found In Version: 10.23.30.1
Fix Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

CREATE(Triage):(User=admin) CVE-2023-2006 (https://nvd.nist.gov/vuln/detail/CVE-2023-2006)

CVEs


Live chat
Online