CVE-2023-39191: Fixes in Linux Kernel
An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAPBPF privileges to escalate privileges and execute arbitrary code in the context of the kernel.
Other sources
BPF recently supported a new feature, dynptr (https://lwn.net/Articles/895885). An improper input validation issue was found in dynptr, potentially leading to local privilege escalation. This flaw requires CAPBPF to be exploited.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.3
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-39191.
What is the title of this vulnerability?
The title of this vulnerability is Linux Kernel eBPF Improper Input Validation Privilege Escalation Vulnerability.
What is the severity of CVE-2023-39191?
The severity of CVE-2023-39191 is high with a severity value of 8.2.
How can this vulnerability be exploited?
This vulnerability can be exploited by local attackers who have obtained the ability to execute high-privileged code on the target system.
Are there any known references related to this vulnerability?
Yes, there are some references related to this vulnerability. You can find them at the following links: [Link 1](https://lwn.net/Articles/895885), [Link 2](https://lore.kernel.org/all/20230121002241.2113993-1-memxor@gmail.com/), [Link 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2242087).