CVE-2023-2163

CRITICAL EXPLOITED

Linux Kernel >=5.4 - Privilege Escalation

Title source: llm

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Exploits (1)

nomisec STUB 1 stars

by letsr00t · poc

https://github.com/letsr00t/CVE-2023-2163

View Code ZIP pw:eip

References (2)

[Mailing List, Patch] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed

[Various Sources] https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability

Scores

CVSS v3 10.0

EPSS 0.0019

EPSS Percentile 40.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Exploitation Intel

VulnCheck KEV 2025-09-03

Classification

CWE

CWE-682

Status published

Affected Products (1)

linux/linux_kernel < 5.4.242

Timeline

Published Sep 20, 2023

Tracked Since Feb 18, 2026