CVE-2023-39191High· 8.2▾ Abyssal0dayAn improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an …
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 45.1 · likelihood 0.1 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code in the context of the kernel.
kernel (all versions)kernel (all versions)kernel (all versions)kernel-rt (all versions)kpatch-patchkernelkernelkernel-rtkernelkernel-rtkernel-rt (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-6679Medium· 5.5Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
CVE-2023-4194Medium· 5.5Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid
CVE-2021-4204NoneAn out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation
CVE-2026-87765Medium· 5.5In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index
CVE-2023-4387High· 7.1Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()
CVE-2023-39197Medium· 4.0Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()