CVE-2023-0386

HIGH CISA KEV EPSS 94.0%

Published Mar 22, 20233y ago · Modified Jun 17, 20262w ago

7.8 CVSS 3.1

High

Find Similar

Published Mar 22, 2023 3y ago

Last Modified Jun 17, 2026 2w ago

KEV Listed Jun 17, 2025 1y ago

KEV Due Jul 8, 2025 363d overdue

Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

CVSS Details

Base Score

7.8

Exploitability

1.8

Impact

5.9

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

CISA Known Exploited Overdue 363d

Added: Jun 17, 2025
Due: Jul 8, 2025

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS Exploit Probability

94.0% percentile

Exploit & Patch Status

Actively Exploited (KEV)

Patch Available

Weaknesses 1

CWE-282

Affected Products 21

Vendor	Product	Version	Range
debian	debian_linux	10.0	any
netapp	h300s_firmware	*	any
netapp	h300s	*	any
netapp	h500s_firmware	*	any
netapp	h500s	*	any
netapp	h700s_firmware	*	any
netapp	h700s	*	any
netapp	h410s_firmware	*	any
netapp	h410s	*	any
netapp	h410c_firmware	*	any
netapp	h410c	*	any
canonical	ubuntu_linux	18.04	any
canonical	ubuntu_linux	20.04	any
canonical	ubuntu_linux	22.04	any
linux	linux_kernel	*	≥5.11 – <5.15.91
linux	linux_kernel	*	≥5.16 – <6.1.9
linux	linux_kernel	6.2	any
linux	linux_kernel	6.2	any
linux	linux_kernel	6.2	any
linux	linux_kernel	6.2	any
linux	linux_kernel	6.2	any

References 7

packetstormsecurity.com http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html

Third Party Advisory
git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a

Broken LinkMailing ListPatchVendor Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html

Mailing ListThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

Mailing ListThird Party Advisory
security.netapp.com https://security.netapp.com/advisory/ntap-20230420-0004/

Third Party Advisory
cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-0386

US Government Resource
debian.org https://www.debian.org/security/2023/dsa-5402

Third Party Advisory

Remediation

git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a

Broken LinkMailing ListPatchVendor Advisory