CVE-2023-2156

2023-05-0900:00:00

ubuntu.com

linux

kernel

denial of service

networking

rpl protocol

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.013 Low

EPSS

Percentile

85.9%

JSON

A flaw was found in the networking subsystem of the Linux kernel within the
handling of the RPL protocol. This issue results from the lack of proper
handling of user-supplied data, which can lead to an assertion failure.
This may allow an unauthenticated remote attacker to create a denial of
service condition on the system.

Bugs

<https://bugzilla.redhat.com/show_bug.cgi?id=2196292>

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-86.96UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-34.34UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1047.52UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1013.13UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1047.52~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.2< 6.2.0-1013.13~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1049.56UNKNOWN
ubuntu23.04noarchlinux-azure< 6.2.0-1014.14UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1049.56~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-6.2< 6.2.0-1014.14~22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-86.96	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-34.34	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1047.52	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1013.13	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1047.52~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.2	< 6.2.0-1013.13~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1049.56	UNKNOWN
ubuntu	23.04	noarch	linux-azure	< 6.2.0-1014.14	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1049.56~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.2	< 6.2.0-1014.14~22.04.1	UNKNOWN