CVEvulnerability

CVE-2023-2163

8.8 HIGH Published 2023-09-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-682

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Affected configurations

• linux linux kernel (>= 5.3 < 5.4.242) • linux linux kernel (>= 5.5 < 5.10.179) • linux linux kernel (>= 5.11 < 5.15.109) • linux linux kernel (>= 5.16 < 6.1.26) • linux linux kernel (>= 6.2 < 6.2.13)

Related

Weakness · CWE (1)

  • CWE-682 Incorrect Calculation weakness

References