PT-2023-8473 · Linux+1 · Linux Kernel+1

David Ahern + 1 · Published 2023-12-21 · Updated 2025-10-03 · CVE-2023-6200

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A race condition was found in the Linux Kernel, related to the reuse of previously freed memory due to concurrent access to a resource in the fib6 add() function in the net/ipv6/ip6 fib.c module. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution. This issue is associated with the IPv6 implementation in the Linux kernel and can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

ALT-PU-2024-10855

ALT-PU-2024-1867

ALT-PU-2025-12647

AZL-34029

AZL-34866

BDU:2024-00926

CVE-2023-6200

ZDI-24-842

Affected Products

Alt Linux

Linux Kernel

References · 33

• https://ubuntu.com/security/CVE-2023-6200 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2250377 · Patch
• https://osv.dev/vulnerability/CVE-2023-6200 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-6200 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-6200 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00926 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6200 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-842 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6200 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dade3f6a1e4e · Patch
• https://osv.dev/vulnerability/AZL-34866 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-6200 · Security Note
• https://osv.dev/vulnerability/AZL-34029 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6200 · Note
• https://access.redhat.com/security/cve/CVE-2023-6200 · Note