CVE-2023-2156: debian debian_linux Reachable Assertion

Modified

AliasesSUSE-SU-2023:3658-1UBUNTU-CVE-2023-2156DEBIAN-CVE-2023-2156

Published 09-05-2023Last modified 02-08-2024

Vulnerability summary

CVE-2023-2156 is a high (CVSS 7.5) Reachable Assertion vulnerability in debian debian_linux. EPSS estimates a 6.18% chance of exploitation in the next 30 days, higher than 93.5% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 7.5 (NVD); no exploitation reported by the 5 checked sources; EPSS 6% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

6.18%

0%100%

Low · +0.05 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 50 · Related 44

DLA-3512-1 DSA-5448-1 DSA-5453-1 MGASA-2023-0201 MGASA-2023-0202 RHSA-2023:6583+44 more

Timeline

09-05-2023
PublishedVulnerability first disclosed.
02-08-2024
Last modifiedVulnerability information updated.

Description

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

CVSS metrics

4 scores · 3 sources · 2 versions

v4.08.7v3.17.5

EPSS trend

Probability

6.18%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

Increase +0.05 pp

From 6.13% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-617Reachable AssertionThe product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu91 products

linux< 5.15.0-86.96
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 5.15.0-1047.52
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1047.52~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2< 6.2.0-1013.13~22.04.1
linux-azureAll versions (No fix recorded) | < 5.15.0-1049.56
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1049.56~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2< 6.2.0-1014.14~22.04.1
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fde< 5.15.0-1049.56.1
linux-azure-fde-5.15< 5.15.0-1114.123~20.04.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2< 6.2.0-1014.14~22.04.1.1
linux-bluefield< 5.15.0-1027.29
linux-fipsAll versions (No fix recorded)
linux-gcpAll versions (No fix recorded) | < 5.15.0-1044.52
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1044.52~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2< 6.2.0-1016.18~22.04.1
linux-gke< 5.15.0-1044.49
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.15.0-1030.35
linux-gkeop-5.15< 5.15.0-1030.35~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-86.96~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2< 6.2.0-34.34~22.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.15.0-1040.43
linux-ibm-5.15< 5.15.0-1040.43~20.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1040.42
linux-intel-iotg< 5.15.0-1043.49
linux-intel-iotg-5.15< 5.15.0-1043.49~20.04.1
linux-kvm< 5.15.0-1044.49
linux-lowlatency< 5.15.0-86.95
linux-lowlatency-hwe-5.15< 5.15.0-86.95~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2< 6.2.0-1014.14~22.04.1
linux-nvidia< 5.15.0-1037.37
linux-nvidia-6.2< 6.2.0-1011.11
linux-nvidia-tegra< 5.15.0-1018.18
linux-nvidia-tegra-5.15< 5.15.0-1018.18~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1005.5
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1< 6.1.0-1016.16
linux-oracle< 5.15.0-1045.51
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1045.51~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.8All versions (No fix recorded)
linux-raspi< 5.15.0-1040.43
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1048.54
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1043.47~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-xilinx-zynqmp< 5.15.0-1025.29

Show all 91

Debian2 products

linux< 6.1.37-1 | < 6.3.11-1
debian_linuxEOL10.0

Suse2 products

kernel-livepatch-SLE15-SP4_Update_15&distro=SUSE Linux Enterprise Live Patching 15 SP4< 2-150400.2.1
kernel-livepatch-SLE15-SP5_Update_2&distro=SUSE Linux Enterprise Live Patching 15 SP5< 2-150500.2.1

Fedoraproject1 product