CVE-2023-0386

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Score
CVSS 3.1 7.8 High
Status
Analyzed - secalert@redhat.com
Published
2023-03-22
Last modified
2025-10-21
Known exploited (CISA KEV)
since 2025-06-17, action due 2025-07-08: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Weaknesses
CWE-282

Affected products

References

 
 
© AVABIS GmbH privacypolicy about