A race condition was found in the Linux kernel's RxRPC network protocol. Quoting ZDI security advisory [1]: "This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of RxRPC bundles. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel." [1] https://www.zerodayinitiative.com/advisories/ZDI-23-439/
Upstream fix: https://github.com/torvalds/linux/commit/3bcd6c7eaa53
Note that although this bug is present in the RHEL 9.0 and 9.1 source trees, the rxrpc module for those releases is not built, shipped or supported by Red Hat or AuriStor. For RHEL 9.2, the rxrpc module will be enabled (partner supported and shipped), but the fix for the CVE has already been applied (see https://bugzilla.redhat.com/show_bug.cgi?id=2170099 and the associated merge request). So there should not be any RHEL releases that are vulnerable to the issue in this CVE.
Thanks Marc, I have updated the flaw bug's metadata accordingly.
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2023-2006