First published: Wed Sep 20 2023(Updated: )
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape. Reference and upstream patch: <a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f3082730156c0533fed</a>
Credit: cve-coordination@google.com cve-coordination@google.com cve-coordination@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Linux kernel | >=5.4<6.3 | |
Linux Linux kernel | =6.3-rc1 | |
Linux Linux kernel | =6.3-rc2 | |
Linux Linux kernel | =6.3-rc3 | |
Linux Linux kernel | =6.3-rc4 | |
Linux Linux kernel | =6.3-rc5 | |
Linux Linux kernel | =6.3-rc6 | |
Linux Linux kernel | =6.3-rc7 | |
IBM QRadar SIEM | <=7.5 - 7.5.0 UP8 IF01 | |
Linux Linux kernel | >=5.3<5.4.242 | |
Linux Linux kernel | >=5.5<5.10.179 | |
Linux Linux kernel | >=5.11<5.15.109 | |
Linux Linux kernel | >=5.16<6.1.26 | |
Linux Linux kernel | >=6.2<6.2.13 | |
redhat/kernel | <6.3 | 6.3 |
debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.12.6-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.