CVE-2023-52828

CVE-2023-52828 is a vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. It arises when a BPF program uses a "bpf_throw" kfunc or a subprogram that always throws, especially when such a call is the final instruction. This can lead to unreliable stack unwinding and a kernel panic because the return address falls outside the program's recognized boundaries. The vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low attack complexity. A successful exploit could lead to a denial of service (kernel panic), impacting system availability. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness and attention.