cve/2023/CVE-2023-2163.md

CVE-2023-2163

Description

Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafecode paths being incorrectly marked as safe, resulting in arbitrary read/write inkernel memory, lateral privilege escalation, and container escape.

POC

Reference

No PoCs from references.

Github

• https://github.com/Dikens88/hopp
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE
• https://github.com/aobakwewastaken/aobakwewastaken
• https://github.com/carmilea/carmilea
• https://github.com/google/buzzer
• https://github.com/google/security-research
• https://github.com/kherrick/hacker-news
• https://github.com/kherrick/lobsters
• https://github.com/phixion/phixion
• https://github.com/shannonmullins/hopp