ZDI-CAN-15975: ZDI-23-439: Linux Kernel RxRPC Race Condition Privilege Escalation Vulnerability
Published Apr 13, 2023
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
1 affected component
Linux Kernel
Event History
Apr 13, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Feb 26, 2025
Advisory Published
via ZDI·03:45 PM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-15975?
The severity of ZDI-CAN-15975 is high with a CVSS score of 8.8.
2
Who is affected by ZDI-CAN-15975?
Any installations of Linux Kernel are affected by ZDI-CAN-15975.
3
What is the vulnerability in ZDI-CAN-15975?
ZDI-CAN-15975 is a privilege escalation vulnerability caused by a race condition in the processing of RxRPC buffers in the Linux Kernel.
4
How can this vulnerability be exploited?
To exploit ZDI-CAN-15975, an attacker must first gain the ability to execute low-privileged code on the target system.
5
Is there a fix for ZDI-CAN-15975?
Yes, a fix for ZDI-CAN-15975 is available. It is recommended to apply the latest patches provided by the Linux Kernel.