Skip to content

Latest commit

 

History

History

cve-2023-2163

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
include
include
 
 
Makefile
Makefile
 
 
exploit.c
exploit.c
 
 
exploit_prims.c
exploit_prims.c
 
 
kernel_helpers.c
kernel_helpers.c
 
 
readme.md
readme.md
 
 

readme.md

CVE-2023-2163: Path pruning gone wrong

This Proof-Of-Concept demonstrates the exploitation of CVE-2023-2163.

Technical details

A bug in the eBPF Verifier branch pruning logic can lead to unsafe code paths being incorrectly marked as safe. As demonstrated in the exploitation section, this can be leveraged to get arbitrary read/write in kernel memory, leading to LPE and Container escape.

Usage

$ make
$ ./exploit

Credits

Juan Jose Lopez Jaimez (@thatjiaozi) Meador Inge (@meadori) Simon Scannell (@scannell_simon) Valentina Palmiotti (@chompie1337)