Back to CVE Browser

CVE-2023-0386

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-03-22

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Affected Platforms (CPE)

💻

Debian

Debian Linux

= 10.0

💻

Netapp

H300s Firmware

All versions

💻

Netapp

H500s Firmware

All versions

💻

Netapp

H700s Firmware

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html

🔗 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a

🔗 https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html

🔗 https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

🔗 https://security.netapp.com/advisory/ntap-20230420-0004/

🔗 https://www.debian.org/security/2023/dsa-5402

🔗 http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html

🔗 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a

Related Vulnerabilities

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop ...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in diges...

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_...