NetSight
IP …
critical10.0

CVE-2023-2163

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kerne…

Impact

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.3 before 5.4.242
from 5.5 before 5.10.179
from 5.11 before 5.15.109
from 5.16 before 6.1.26
from 6.2 before 6.2.13

Weakness classification

CWE-682

References