CVE-2023-2163

CRITICAL EXPLOITED

Linux Kernel >=5.4 - Privilege Escalation

Title source: llm

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.

Exploits (2)

nomisec STUB 1 stars

by letsr00t · poc

https://github.com/letsr00t/CVE-2023-2163

View Code ZIP pw:eip

github

by sinkthemall · cpoc

https://github.com/sinkthemall/CVE-PoC/tree/main/CVE-2023-2163

View on github

References (2)

[Mailing List, Patch] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed

[Various Sources] https://bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability

Scores

CVSS v3 10.0

EPSS 0.0021

EPSS Percentile 43.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Details

VulnCheck KEV 2025-09-03

CWE

CWE-682

Status published

Products (1)

linux/linux_kernel 5.3 - 5.4.242

Published Sep 20, 2023

Tracked Since Feb 18, 2026