← Database

CVE-2023-0386

HIGH CVSS: 7.8 Published: 2023-03-22 Modified: 2026-06-17

Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Affected Platforms

Netapp H410SCanonical Ubuntu LinuxNetapp H410CLinux Linux KernelNetapp H300S FirmwareNetapp H300SDebian Debian LinuxNetapp H410S FirmwareNetapp H700S FirmwareNetapp H410C Firmware

Weakness Type

CWE-282, NVD-CWE-Other

References