PT-2023-3564 · Linux+9 · Linux Kernel+9
Juan Jose Lopez Jaimez
+4
·
Published
2023-04-19
·
Updated
2025-11-05
·
CVE-2023-2163
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
kernel-image-rpi-un version 6.1.77-alt1
Linux Kernel versions >=5.4
kernel-image-std-def version 5.10.179-alt1
Linux Kernel 5.3.18-150200 24 166
Description
The Linux kernel is susceptible to a vulnerability stemming from an incorrect verifier pruning in BPF. This flaw allows unsafe code paths to be incorrectly marked as safe, potentially leading to arbitrary read/write access in kernel memory, lateral privilege escalation, and container escape. The vulnerability affects Linux Kernel versions 5.4 and later. The
backtrack insn() function within the kernel/bpf/verifier.c module is implicated in this issue.Recommendations
Update kernel-image-rpi-un to version 6.1.77-alt1.
Update kernel-image-std-def to version 5.10.179-alt1.
Update Linux Kernel 5.3.18-150200 24 166 to a fixed version.
Update Linux Kernel to a version greater than or equal to 5.4 with the fix applied.
Fix
Out of bounds Read
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linux Kernel
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu