CVE-2023-2163 | Incorrect verifier pruning in BPF in Linux Kernel >=5.4 lead… | CVSS 10.0 CRITICAL

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Metadata

CVE ID: CVE-2023-2163
State: PUBLISHED
Assigner: Google
Reserved: 2023-04-18 18:22 UTC
Published: 2023-09-20 05:02 UTC
Last updated: 2025-02-27 20:49 UTC
Primary CWE: CWE-682
CWE-682 Incorrect Calculation
Vendor / Product: Linux / Linux Kernel
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Linux	Linux Kernel	—	0 < 5.4, 0 < 71b547f561247897a0a14f3082730156c0533fed

Weakness (CWE)

CWE	Source	Description
CWE-682	cna	CWE-682 Incorrect Calculation

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References (1)

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed