← Back

CVE-2023-2163

nvd nist
Published: Sep 20, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: NVD

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Affected (5)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 5.11 to 5.15.109
Linux Kernel
From 5.16 to 6.1.26
Linux Kernel
From 5.3 to 5.4.242
Linux Kernel
From 5.5 to 5.10.179
Linux Kernel
From 6.2 to 6.2.13

Related CWEs

CWE-682
Incorrect Calculation
The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

References (3)

Source: cve-coordination@google.com
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch

Timeline

No history available yet.