CVE-2023-52928: bpf: Skip invalid kfunc call in backtrack_insn

Q: What is the severity of CVE-2023-52928?

CVE-2023-52928 is classified as a medium severity vulnerability.

Q: How do I fix CVE-2023-52928?

To fix CVE-2023-52928, you should upgrade to the latest version of the Linux kernel that includes the patch.

Q: What issues does CVE-2023-52928 address?

CVE-2023-52928 addresses the problem of skipping invalid kfunc calls during the verification process in the Linux kernel.

Q: Is CVE-2023-52928 exploitable?

CVE-2023-52928 can potentially be exploited if the invalid kfunc calls are not adequately handled.

Q: Which versions of the Linux kernel are affected by CVE-2023-52928?

CVE-2023-52928 affects various versions of the Linux kernel prior to the release of the fix.

Published Mar 27, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

bpf: Skip invalid kfunc call in backtrackinsn

The verifier skips invalid kfunc call in checkkfunccall(), which would be captured in fixupkfunccall() if such insn is not eliminated by dead code elimination. However, this can lead to the following warning in backtrackinsn(), also see [1]:

------------[ cut here ]------------ verifier backtracking bug WARNING: CPU: 6 PID: 8646 at kernel/bpf/verifier.c:2756 backtrackinsn kernel/bpf/verifier.c:2756 markchainprecision kernel/bpf/verifier.c:3065 markchainprecision kernel/bpf/verifier.c:3165 adjustregminmaxvals kernel/bpf/verifier.c:10715 checkaluop kernel/bpf/verifier.c:10928 docheck kernel/bpf/verifier.c:13821 [inline] docheckcommon kernel/bpf/verifier.c:16289 [...]

So make backtracking conservative with this by returning ENOTSUPP.

[1] https://lore.kernel.org/bpf/CACkBjsaXNceR8ZjkLG=dT3P=4A8SBsg0Z5h5PWLryF5=ghKq=g@mail.gmail.com/

Affected Software

117 affected componentsFixes available

Linux Foundation Linux Kernel

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.15<5.15.0-1036.40~20.04.1

5.15.0-1036.40~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1038.45~20.04.1

5.15.0-1038.45~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1034.42~20.04.1

5.15.0-1034.42~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-72.79~20.04.1

5.15.0-72.79~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1030.35~20.04.1

5.15.0-1030.35~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-72.79~20.04.1

5.15.0-72.79~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1014.14~20.04.1

5.15.0-1014.14~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1035.41~20.04.1

5.15.0-1035.41~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1033.37~20.04.1

5.15.0-1033.37~20.04.1

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-72.79

5.15.0-72.79

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1036.40

5.15.0-1036.40

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1038.45

5.15.0-1038.45

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1038.45.1

5.15.0-1038.45.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1034.42

5.15.0-1034.42

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1033.38

5.15.0-1033.38

ubuntu/linux-gkeop<5.15.0-1020.25

5.15.0-1020.25

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1030.33

5.15.0-1030.33

ubuntu/linux-intel-iotg<5.15.0-1030.35

5.15.0-1030.35

ubuntu/linux-kvm<5.15.0-1033.38

5.15.0-1033.38

ubuntu/linux-lowlatency<5.15.0-72.79

5.15.0-72.79

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1025.25

5.15.0-1025.25

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1035.41

5.15.0-1035.41

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1029.31

5.15.0-1029.31

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-bluefield<5.15.0-1017.19

5.15.0-1017.19

ubuntu/linux-intel-iot-realtime<5.15.0-1028.33

5.15.0-1028.33

ubuntu/linux-realtime<5.15.0-1038.41

5.15.0-1038.41

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

Linux Linux kernel>=5.13<5.15.93

Linux Linux kernel>=5.16<6.1.11

Linux Linux kernel=6.2-rc1

Linux Linux kernel=6.2-rc2

Linux Linux kernel=6.2-rc3

Linux Linux kernel=6.2-rc4

debian/linux<6.1.11-1

6.1.11-1

debian/linux<6.1.11-1

6.1.11-1

debian/linux<6.1.11-1

6.1.11-1

linux/kernel>=5.13.0<5.15.93

5.15.93

linux/kernel>=5.16.0<6.1.11

6.1.11

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1036.40~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.45~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1034.42~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-72.79~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.35~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-72.79~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1014.14~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.41~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.37~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-72.79
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1036.40
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.45
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.45.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1034.42
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.38
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.25
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.33
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.35
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.38
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-72.79
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.25
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.41
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.31
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1017.19
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1028.33
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.41
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.11-1
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.93
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.11
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.15-1

Event History

Mar 27, 2025

CVE Published

via MITRE·04:37 PM

Data Sourced

via MITRE·04:37 PM

Description

Data Sourced

via OSV·04:37 PM

DescriptionAffected Software

Data Sourced

via OSV·05:15 PM

Severity

Data Sourced

via NVD·05:15 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-52928?

CVE-2023-52928 is classified as a medium severity vulnerability.

How do I fix CVE-2023-52928?

To fix CVE-2023-52928, you should upgrade to the latest version of the Linux kernel that includes the patch.

What issues does CVE-2023-52928 address?

CVE-2023-52928 addresses the problem of skipping invalid kfunc calls during the verification process in the Linux kernel.

Is CVE-2023-52928 exploitable?

CVE-2023-52928 can potentially be exploited if the invalid kfunc calls are not adequately handled.

Which versions of the Linux kernel are affected by CVE-2023-52928?

CVE-2023-52928 affects various versions of the Linux kernel prior to the release of the fix.

CVE-2023-52928: bpf: Skip invalid kfunc call in backtrack_insn

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2023-52928?

How do I fix CVE-2023-52928?

What issues does CVE-2023-52928 address?

Is CVE-2023-52928 exploitable?

Which versions of the Linux kernel are affected by CVE-2023-52928?

Company

Resources

Contact