PT-2023-3564
CVE-2023-2163
·
تاريخ النشر
2023-04-19
·
تاريخ التحديث
2025-11-05
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
kernel-image-rpi-un version 6.1.77-alt1
Linux Kernel versions >=5.4
kernel-image-std-def version 5.10.179-alt1
Linux Kernel 5.3.18-150200 24 166
Description
The Linux kernel is susceptible to a vulnerability stemming from an incorrect verifier pruning in BPF. This flaw allows unsafe code paths to be incorrectly marked as safe, potentially leading to arbitrary read/write access in kernel memory, lateral privilege escalation, and container escape. The vulnerability affects Linux Kernel versions 5.4 and later. The
backtrack insn() function within the kernel/bpf/verifier.c module is implicated in this issue.Recommendations
Update kernel-image-rpi-un to version 6.1.77-alt1.
Update kernel-image-std-def to version 5.10.179-alt1.
Update Linux Kernel 5.3.18-150200 24 166 to a fixed version.
Update Linux Kernel to a version greater than or equal to 5.4 with the fix applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾