Linux · Linux Kernel · CVE-2023-2163
**Name of the Vulnerable Software and Affected Versions**
kernel-image-rpi-un version 6.1.77-alt1
Linux Kernel versions >=5.4
kernel-image-std-def version 5.10.179-alt1
Linux Kernel 5.3.18-150200 24 166
**Description**
The Linux kernel is susceptible to a vulnerability stemming from an incorrect verifier pruning in BPF. This flaw allows unsafe code paths to be incorrectly marked as safe, potentially leading to arbitrary read/write access in kernel memory, lateral privilege escalation, and container escape. The vulnerability affects Linux Kernel versions 5.4 and later. The `backtrack insn()` function within the kernel/bpf/verifier.c module is implicated in this issue.
**Recommendations**
Update kernel-image-rpi-un to version 6.1.77-alt1.
Update kernel-image-std-def to version 5.10.179-alt1.
Update Linux Kernel 5.3.18-150200 24 166 to a fixed version.
Update Linux Kernel to a version greater than or equal to 5.4 with the fix applied.