CVE-2023-2163
Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation
HIGH 8.8EPSS 3.6%
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafecode paths being incorrectly marked as safe, resulting in arbitrary read/write inkernel memory, lateral privilege escalation, and container escape.
- Affected
- Linux · Linux Kernel
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS v3.1 GOOGLE
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N - EPSS
- 3.64% chance of exploitation in the next 30 days, 89th percentile
- Published
- 2023-09-20
- Updated
- 2025-02-27
Proof-of-concept exploits (2)
- letsr00t/CVE-2023-21631★ · 2024-11-27
- mrmilady/ebpf-kernel-exploits0★ · 2026-10-09
Exploit collections (1)
- linux/cve-2023-2163google/security-research