CVE-2023-2156Exploit(debian / debian_linux)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch debian debian_linux systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.

debian CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

debian_linux
enterprise_linux
fedora
linux_kernel

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
Exploit: 1 classified signal
Disclosure: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-08-27)
3 total mentions across 2 days

Affected systems

Vendors

debian fedoraproject linux redhat

Products

debian_linuxenterprise_linuxfedoralinux_kernel

3 versions affected across 4 products

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

Exploit

133.3%

Disclosure

133.3%

Patch

133.3%

Referenced assets1 URL

By indicator

https://nebusec.ai/research/cve-2026-43501-route-of-root/

Classification over time

Date	Total	Labels

2026-08-18	1	Exploit1
2026-08-27	2	Disclosure1Patch1

Full discourse3 posts

Nebula Security@nebusecurity46d
Exploit
CVE-2023-2156 was believed to be just a remote kernel DoS, patched in 2023. We found a bypass and achieve privilege escalation and container escape. Read the $10,500 story of CVE-2026-43501 "Route of Root": https://nebusec.ai/research/cve-2026-43501-route-of-root/
Post summary
The post reports a new bypass for CVE‑2023‑2156 that elevates a kernel DoS to privilege escalation and container escape. No PoC link or active exploitation evidence is supplied.
5303146639.9K
7.2K followersView on X
0xor0ne@0xor0ne38d
Disclosure
LPE on any Linux distribution that has IPv6 and namespaces enabled (CVE-2023-2156) (@nebusecurity) https://nebusec.ai/research/cve-2026-43501-route-of-root/ #infosec https://t.co/d9yQuvfSLQ
Post summary
The tweet announces a local privilege escalation vulnerability tied to IPv6 and namespaces on Linux (CVE‑2023‑2156), but provides only minimal technical context without evidence of exploitation, patch, or PoC.
11511278010.8K
94.1K followersView on X
Frank Wu@FrankOverF1ow37d
Patch
@0xor0ne @nebusecurity Thanks for sharing! It's actually two steps further from the 2023 CVE, since we also found a patch bypass: CVE-2026-43501. So this is a writeup for both CVE-2023-2156 and CVE-2026-43501
Post summary
The post discusses a patch bypass for CVE-2026-43501 and references a writeup covering both CVE-2023-2156 and CVE-2026-43501, highlighting a workaround rather than an exploit.
00012360
1.8K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	debian	debian_linux	10.0	-	-
OS	fedoraproject	fedora	38	-	-
OS	linux	linux_kernel	-	-	-
OS	redhat	enterprise_linux	9.0	-	-

Explore more

Back to dashboard debian CVEs fedoraproject CVEs linux CVEs debian_linux vulnerabilities