Linux · Kernel
CVE-2023-0386
Linux Kernel Improper Ownership Management Vulnerability
O que é
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CISA: Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
O que fazer
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Prazo para as agências federais dos EUA: 8 de julho de 2025
- Adicionada à lista da CISA
- 17 de junho de 2025
- Publicada
- 22 de março de 2023
- Gravidade
- Alto 7,8 CVSS 3.1
- Chance de ataques nos próximos 30 dias (EPSS)
- 7,9% entre os 5,3% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-282
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (6)
- https://www.debian.org/security/2023/dsa-5402
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a
- https://security.netapp.com/advisory/ntap-20230420-0004/
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Mais falhas exploradas de Linux
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 18 de set. de 2026 | Improper Check for Unusual or Exceptional Conditions | Kernel | Crítica 9,8 | 3,3% |
| 18 de set. de 2026 | Race Condition | Kernel | Alto 7,8 | 1,6% |
| 18 de set. de 2026 | Out-of-Bounds Write | Kernel | Alto 8,8 | 0,9% |
| 27 de ago. de 2026 | Unspecified | Kernel | Alto 7,8 | 0,7% |
| 26 de ago. de 2026 | Out-of-Bounds Write | Kernel | Alto 7,8 | 8,9% |
| 2 de jun. de 2026 | Improper Authentication | Kernel | Alto 7,8 | 5,5% |
| 1 de mai. de 2026 | Incorrect Resource Transfer Between Spheres | Kernel | Alto 7,8 | 98% |
| 26 de jan. de 2026 | Integer Overflow | Kernel | Alto 7,8 | 15% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.