← Database

CVE-2023-2163

CRITICAL CVSS: 10.0 Published: 2023-09-20 Modified: 2026-06-17

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-682, CWE-682

References