CVE-2023-2006

Published: Apr 24, 2023Modified: Jun 17, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel.

Affected (8)

Products: Linux: Linux Kernel · Netapp: Hci Baseboard Management Controller

Linux

1 product

Linux Kernel

Netapp

1 product

Hci Baseboard Management Controller

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.10 to 5.10.157
Linux Linux Kernel	From 5.11 to 5.15.81
Linux Linux Kernel	From 5.16 to 6.0.11

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Hci Baseboard Management Controller	Version h300s
Netapp Hci Baseboard Management Controller	Version h410c
Netapp Hci Baseboard Management Controller	Version h410s
Netapp Hci Baseboard Management Controller	Version h500s
Netapp Hci Baseboard Management Controller	Version h700s