CVE-2023-2156

2023-05-0900:00:00

CWE-617

redhat

www.cve.org

linux

networking

rpl

protocol

assertion failure

denial of service

remote attacker

unauthenticated

7.5 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.9%

JSON

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux kernel (RPL protocol)",
    "versions": [
      {
        "version": "Reproducible on the latest mainline.",
        "status": "affected"
      }
    ]
  }
]