Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-2163

Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Google

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux Kernel

Default version status: unaffected

  • 0 to < 5.4unaffected
  • 0 to < 71b547f561247897a0a14f3082730156c0533fedaffected

References