CVE-2023-52676

In the Linux kernel, the following vulnerability has been resolved:

bpf: Guard stack limits against 32bit overflow

The Linux kernel CVE team has assigned CVE-2023-52676 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051749-CVE-2023-52676-e224@gregkh/T

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because unprivileged access to the eBPF subsystem is disabled by default via system controls. Exploiting this integer overflow in the eBPF verifier stack bounds checks requires a local attacker to possess administrative capabilities (such as CAP_BPF or CAP_SYS_ADMIN) to load crafted programs. Consequently, untrusted local users cannot exploit this issue on standard configurations, restricting the potential blast radius to a localized denial of service by already privileged accounts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.