CVE-2023-39191

HighCVSS 8.2/10Last modified Nov 7, 2026

Description

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAP_BPF privileges to escalate privileges and execute arbitrary code in the context of the kernel.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—

References

https://access.redhat.com/errata/RHSA-2023:6583Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0381Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0439Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0448Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-39191Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2226783Issue Tracking, Patch, Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-CAN-19399/Patch, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2023:6583Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0381Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0439Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0448Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-39191Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2226783Issue Tracking, Patch, Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-CAN-19399/Patch, Third Party Advisory, VDB Entry

Timeline

Published: Oct 4, 2023
Last modified: Nov 7, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-391926.0A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This CVE-2023-391936.0A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a CVE-2023-391944.4A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can resul CVE-2023-391965.3Improper Authentication vulnerability in Apache Ozone. The vulnerability allows an attacker to download metadata internal to the Storage Co CVE-2023-391977.5An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote us CVE-2023-391986.4A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the CVE-2023-391996.5Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network CVE-2023-39204.3An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.CVE-2023-392016.7Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local a CVE-2023-392025.5Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via lo CVE-2023-392037.5Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated use CVE-2023-392047.5Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.