CVE-2023-0386: high-severity vulnerability in Kernel
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A bug in Linux's OverlayFS allows a local user to run programs with elevated privileges by copying files with special permissions across different mount points. This can let an attacker gain admin-level access to the system.
A uid mapping vulnerability in OverlayFS permits a local attacker to copy setuid/capability-bearing files from nosuid mounts to other mounts, bypassing security restrictions. The attack requires local filesystem access and results in privilege escalation to root or other privileged accounts.
The full analysis of this CVE is available in Portuguese →