A flaw was found in the Linux kernel, where unauthorized... · CVE-2023-0386 · GitHub Advisory Database · GitHub

A flaw was found in the Linux kernel, where unauthorized...

High severity Unreviewed Published Jul 6, 2023 to the GitHub Advisory Database • Updated Jun 27, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

References

Published by the National Vulnerability Database

Mar 22, 2023

Published to the GitHub Advisory Database Jul 6, 2023

Last updated Jun 27, 2024

Severity

High

7.8

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H