CVE-2023-2156: (0Day) Linux Kernel IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability
A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.
Other sources
A reachable assertion issue was found in the Linux kernel's IPv6 RPL protocol. Quoting ZDI security advisory [1]:
"This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the RPL protocol. The issue results from the lack of proper handling of user-supplied data, which can result in an assertion failure. An attacker can leverage this vulnerability to create a denial-of-service condition on the system."
[1] https://www.zerodayinitiative.com/advisories/ZDI-23-547/
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.2.13
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2156?
CVE-2023-2156 has a medium severity rating due to the potential for assertion failures resulting from improper handling of user-supplied data.
How do I fix CVE-2023-2156?
To fix CVE-2023-2156, update your Linux kernel to version 6.2.13 or apply recommended patches for affected versions.
Which Linux distributions are affected by CVE-2023-2156?
CVE-2023-2156 affects various Linux distributions, including Red Hat Enterprise Linux 9.0, Fedora 38, and versions of the Linux kernel prior to 6.2.13.
Can CVE-2023-2156 be exploited remotely?
Yes, CVE-2023-2156 can potentially be exploited by unauthenticated remote attackers due to the nature of the vulnerability.
What components are impacted by CVE-2023-2156?
The vulnerability impacts the networking subsystem of the Linux kernel, specifically related to the handling of the RPL protocol.