# CVE-2023-2163

## Summary

- **CVE ID:** CVE-2023-2163
- **Severity:** CRITICAL
- **CVSS Score:** 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)
- **CWE:** CWE-682
- **Published:** Sep 20, 2023
- **Last Modified:** Mar 13, 2026

## Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe
code paths being incorrectly marked as safe, resulting in arbitrary read/write in
kernel memory, lateral privilege escalation, and container escape.

## Affected Products

- Linux — Linux Kernel (0)

## References

- [CNA](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed)
- [CVE](https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.17%
- **EPSS Percentile:** 38.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-19._