CVE-2023-2163
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 10
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
- EPSS probability
- 0.17%
- CWE
- CWE-682
- Published
- 2023-09-20
- Last modified
- 2026-03-13
Affected products
- Linux Linux Kernel
Weakness type
Related vulnerabilities
- CVE-2022-23066 — Solana rBPF - Incorrect Calculation in sdiv instruction
- CVE-2021-31440 — This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An a
- CVE-2023-2423 — Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service
- CVE-2026-54754 — Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
- CVE-2026-25634 — iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()
- CVE-2026-53671 — PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification
- CVE-2026-53670 — PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification
- CVE-2026-44498 — ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops