Live › vulnerability › CVE-2023-0386
Go to dashboardA flaw in the Linux kernel's OverlayFS lets a local user copy a file with capabilities from a nosuid mount into another mount and gain elevated privileges. An attacker with a local shell gets root-level privileges on the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| debian linux | vendor | = 10.0 | – |
| netapp h300s firmware | vendor | – | – |
| netapp h500s firmware | vendor | – | – |
| netapp h700s firmware | vendor | – | – |
| netapp h410s firmware | vendor | – | – |
| netapp h410c firmware | vendor |
| – |
| – |
| canonical ubuntu linux | vendor | = 18.04 | – |
| canonical ubuntu linux | vendor | = 20.04 | – |
| canonical ubuntu linux | vendor | = 22.04 | – |
| linux kernel | vendor | >= 5.11, < 5.15.91 | 5.15.91 |
| linux kernel | vendor | >= 5.16, < 6.1.9 | 6.1.9 |
| linux kernel | vendor | = 6.2 | – |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Update to a patched Linux kernel from your distribution; the sources do not name the fixed versions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-0386")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.