PT-2023-3564 · Linux+9 · Linux Kernel+9
Juan Jose Lopez Jaimez
+4
·
Publicado
2023-04-19
·
Atualizado
2025-11-05
·
CVE-2023-2163
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
kernel-image-rpi-un version 6.1.77-alt1
Linux Kernel versions >=5.4
kernel-image-std-def version 5.10.179-alt1
Linux Kernel 5.3.18-150200 24 166
Description
The Linux kernel is susceptible to a vulnerability stemming from an incorrect verifier pruning in BPF. This flaw allows unsafe code paths to be incorrectly marked as safe, potentially leading to arbitrary read/write access in kernel memory, lateral privilege escalation, and container escape. The vulnerability affects Linux Kernel versions 5.4 and later. The
backtrack insn() function within the kernel/bpf/verifier.c module is implicated in this issue.Recommendations
Update kernel-image-rpi-un to version 6.1.77-alt1.
Update kernel-image-std-def to version 5.10.179-alt1.
Update Linux Kernel 5.3.18-150200 24 166 to a fixed version.
Update Linux Kernel to a version greater than or equal to 5.4 with the fix applied.
Correção
Out of bounds Read
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Linux Kernel
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu