PT-2023-3564
CVE-2023-2163
·
تاريخ النشر
2023-04-19
·
تاريخ التحديث
2025-11-05
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
kernel-image-rpi-un version 6.1.77-alt1
Linux Kernel versions >=5.4
kernel-image-std-def version 5.10.179-alt1
Linux Kernel 5.3.18-150200 24 166
Description
The Linux kernel is susceptible to a vulnerability stemming from an incorrect verifier pruning in BPF. This flaw allows unsafe code paths to be incorrectly marked as safe, potentially leading to arbitrary read/write access in kernel memory, lateral privilege escalation, and container escape. The vulnerability affects Linux Kernel versions 5.4 and later. The
backtrack insn() function within the kernel/bpf/verifier.c module is implicated in this issue.Recommendations
Update kernel-image-rpi-un to version 6.1.77-alt1.
Update kernel-image-std-def to version 5.10.179-alt1.
Update Linux Kernel 5.3.18-150200 24 166 to a fixed version.
Update Linux Kernel to a version greater than or equal to 5.4 with the fix applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾