Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2023-0386

Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

POC

Reference

- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html

- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a

Github

- https://github.com/0xMarcio/cve

- https://github.com/20142995/sectool

- https://github.com/3yujw7njai/CVE-2023-0386

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/AabyssZG/AWD-Guide

- https://github.com/AiK1d/CVE-2023-0386

- https://github.com/Andromeda254/cve

- https://github.com/Anekant-Singhai/Exploits

- https://github.com/Ant0nioPer3ira/t0n1-2025-main

- https://github.com/Awrrays/Pentest-Tips

- https://github.com/CKevens/CVE-2023-0386

- https://github.com/CVEDB/awesome-cve-repo

- https://github.com/CVEDB/top

- https://github.com/DataDog/security-labs-pocs

- https://github.com/Disturbante/Linux-Pentest

- https://github.com/EGI-Federation/SVG-advisories

- https://github.com/EstamelGG/CVE-2023-0386-libs

- https://github.com/Fanxiaoyao66/CVE-2023-0386

- https://github.com/Fanxiaoyao66/Hack-The-Box-TwoMillion

- https://github.com/GhostTroops/TOP

- https://github.com/MGamalCYSEC/ExploitFix-Linux

- https://github.com/Mr-xn/Penetration_Testing_POC

- https://github.com/OSS-SASM/RhsaCveScanner

- https://github.com/P4x1s/CVE-2023-0386

- https://github.com/PsychoH4x0r/Unknown1337-Auto-Root-

- https://github.com/PuddinCat/GithubRepoSpider

- https://github.com/Satheesh575555/linux-4.19.72_CVE-2023-0386

- https://github.com/Snoopy-Sec/Localroot-ALL-CVE

- https://github.com/Threekiii/CVE

- https://github.com/abylinjohnson/linux-kernel-exploits

- https://github.com/b1ank1108/awesome-stars

- https://github.com/beruangsalju/LocalPrivilegeEscalation

- https://github.com/bright-angel/sec-repos

- https://github.com/chenaotian/CVE-2023-0386

- https://github.com/churamanib/CVE-2023-0386

- https://github.com/devilzsecurity/2million-htb-root

- https://github.com/djytmdj/Tool_Summary

- https://github.com/hktalent/TOP

- https://github.com/hshivhare67/kernel_v4.19.72_CVE-2023-0386

- https://github.com/hungslab/awd-tools

- https://github.com/hutninghackers344/2million-htb-root

- https://github.com/ileisd/CiberSeg-Estudi

- https://github.com/izj007/wechat

- https://github.com/johe123qwe/github-trending

- https://github.com/kp18-cpu/Computer_System_Security

- https://github.com/kp18-cpu/Vulnerability_in_suid_libraries

- https://github.com/letsr00t/CVE-2023-0386

- https://github.com/lions2012/Penetration_Testing_POC

- https://github.com/nisadevi11/Localroot-ALL-CVE

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/orilevy8/cve-2023-0386

- https://github.com/packetinside/CISA_BOT

- https://github.com/pawan-shivarkar/pawan-shivarkar

- https://github.com/plzheheplztrying/cve_monitor

- https://github.com/puckiestyle/CVE-2023-0386

- https://github.com/ramoa1234/Rowhammer

- https://github.com/schoi1337/dockout

- https://github.com/shungo0222/shungo0222

- https://github.com/silentEAG/awesome-stars

- https://github.com/sxlmnwb/CVE-2023-0386

- https://github.com/talent-x90c/cve_list

- https://github.com/tanjiti/sec_profile

- https://github.com/theG3RMAN/HaloX

- https://github.com/thekeen01/docker-cve-build

- https://github.com/toastydz/toastydz.github.io

- https://github.com/toastytoastytoasty/toastydz.github.io

- https://github.com/tycloud97/awesome-stars

- https://github.com/ums91/CISA_BOT

- https://github.com/veritas501/CVE-2023-0386

- https://github.com/whoami13apt/files2

- https://github.com/x3t2con/Rttools-2

- https://github.com/x90hack/vulnerabilty_lab

- https://github.com/xairy/linux-kernel-exploitation

- https://github.com/xkaneiki/CVE-2023-0386