---
id: 6591
title: "[CVE-2023-2156] Route of Root: Bring a \"DoS only\" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF"
cve: CVE-2023-2156
source_domain: nebusec.ai
source_url: "https://nebusec.ai/research/cve-2026-43501-route-of-root/"
published_at: "2026-08-08T00:00:00Z"
tags: ["privilege-escalation", "linux-kernel", "exploit", "ipv6", "kernelctf", "cve-2026-43501"]
phying_url: "https://phying.com/item/6591"
lang: en
---

# [CVE-2023-2156] Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF

## Summary

CVE-2023-2156 ("Route of Death") is a Linux kernel vulnerability that was believed to only lead to a DoS attack, and was considered patched in April 2023. However, NebuSec discovered a bypass of the patch and found that it is actually exploitable and can lead to LPE on any Linux distribution that has IPv6 and namespaces enabled. This writeup covers the technical details of the exploit.

## Intelligence Metadata

- **Sources:** nebusec.ai
- **CVE:** CVE-2023-2156
- **Published:** 2026-08-08T00:00:00Z
- **Original:** https://nebusec.ai/research/cve-2026-43501-route-of-root/
- **Phying News:** https://phying.com/item/6591