{"affected":[{"affectedData":[{"product":"Linux kernel (RPL protocol)","vendor":"n/a","versions":[{"status":"affected","version":"Reproducible on the latest mainline."}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"F67355C8-A64B-4676-8228-D06DFF4D37F1","versionEndExcluding":"5.10.184","versionStartIncluding":"5.7","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"3533752B-917D-4DDA-B50D-01F987C374D0","versionEndExcluding":"5.15.117","versionStartIncluding":"5.11","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"827DE634-7B30-489B-8DA2-F753BE881D9B","versionEndExcluding":"6.1.34","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"BFF8B56C-0201-4D6A-901E-C9C643C04FF6","versionEndExcluding":"6.2.13","versionStartIncluding":"6.2","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"B8391DAA-AA40-472B-AA05-CD3BD1E7E1E0","versionEndExcluding":"6.3.8","versionStartIncluding":"6.3","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"7F6FB57C-2BC7-487C-96DD-132683AEB35D","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","matchCriteriaId":"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system."}],"id":"CVE-2023-2156","lastModified":"2026-06-17T05:51:52.600","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2023-05-09T22:15:10.133","references":[{"source":"secalert@redhat.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/17/8"},{"source":"secalert@redhat.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/17/9"},{"source":"secalert@redhat.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/18/1"},{"source":"secalert@redhat.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/19/1"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196292"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230622-0001/"},{"source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.debian.org/security/2023/dsa-5448"},{"source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.debian.org/security/2023/dsa-5453"},{"source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-547/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/17/8"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/17/9"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/18/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/05/19/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196292"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230622-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.debian.org/security/2023/dsa-5448"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.debian.org/security/2023/dsa-5453"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-547/"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-617"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-617"}],"source":"nvd@nist.gov","type":"Primary"}]}