LiveActive security incident?Get immediate response
CVE Record

CVE-2023-52340: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can b...

The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily, e.g., leading to a denial of service (network is unreachable errors) when IPv6 packets are sent in a loop via a raw socket.

HighCVSS 7.5Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysishigh

Security readout for executives and security teams

Plain-English summary

CVE-2023-52340 is a Linux kernel IPv6 resource-consumption flaw. An attacker may be able to exhaust routing-related capacity and cause denial of service, including “network is unreachable” errors. The impact is availability loss, not data theft or code execution based on the supplied sources.

Executive priority

Prioritize remediation where IPv6-enabled Linux systems support critical services. The business risk is service disruption rather than compromise. Patch through normal kernel or vendor update channels, with higher urgency for exposed, shared, or highly available environments.

Technical view

Linux kernels before 6.3 have an IPv6 route.c max_size threshold that can be consumed easily. The CVE describes repeated IPv6 packets via a raw socket as one trigger. The weakness maps to CWE-400 and CVSS 7.5, with high availability impact and no stated confidentiality or integrity impact.

Likely exposure

Exposure is most likely on Linux systems using IPv6 with kernels before 6.3, or vendor-maintained kernels that have not received a backported fix. NetApp and Debian advisories indicate downstream product and distribution relevance. The supplied affected-product metadata is incomplete.

Exploitation context

The source bundle does not show CISA KEV listing or cited active exploitation. The public CVE description gives a trigger example but not evidence of exploitation in the wild. Treat this as a practical denial-of-service risk until vendor status is confirmed.

Researcher notes

Evidence is concise but consistent: kernel commit and Linux 6.3 changelog are primary fix indicators, while Debian and NetApp advisories show downstream handling. Affected CPE data is not useful in the bundle, so validation should rely on kernel version and vendor advisory status.

Mitigation direction

  • Apply Linux kernel 6.3 or a vendor-supported backport containing the fix.
  • Review Debian LTS and NetApp guidance for affected supported products.
  • Prioritize internet-facing or multi-tenant systems where IPv6 is enabled.
  • If no vendor fix is available, check vendor guidance for temporary controls.

Validation and detection

  • Inventory Linux hosts and appliances with IPv6 enabled.
  • Identify kernels before 6.3 and vendor kernels lacking a backport.
  • Confirm relevant Debian LTS or NetApp advisories have been applied.
  • Monitor for unusual IPv6 routing failures or network-unreachable errors.
Prepared
Confidence
medium
Sources
7

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cwe · low confidence lookup

CWE-400: Exact CWE lookup

Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2023-52340 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
High
CVSS
7.5 (3.1)
Known Exploited
No
Published

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
0Timeline events
0ADP providers
6Source links

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
7.5CVSS 3.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H3.93.6Primary CVE score

Vulnerability scoring details

Base CVSS 3.1 score

7.5High
CVSS 3.1 vector shape for CVE-2023-52340Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

CWE-400

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.

CWE-400 · source CWE mapping

Uncontrolled Resource Consumption

Uncontrolled Resource Consumption represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.

Open CWE intelligenceSame-CWE CVEs