Privilege Escalation Vulnerability in Linux Kernel’s OverlayFS System

CVE-2023-0386

Summary

A vulnerability exists in the Linux kernel's OverlayFS subsystem that enables a local user to gain unauthorized access to a setuid file with capabilities. This issue arises when a user copies a capable file from a nosuid mount to another mount, leading to potential privilege escalation. The uid mapping bug presents a significant risk to system security, allowing malicious actors with local access to increase their user privileges, potentially compromising system integrity.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-0386
Created by xkaneiki

CVE-2023-0386
Created by chenaotian

Metasploit exploit module for CVE-2023-0386
Created by Rapid7

More PoCs...

News Articles

yitian.ir

CVE-2023-0386

CVE-2023-0386 | Vulnerabilities

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file

References