cve/2023/CVE-2023-0386.md

CVE-2023-0386

Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

POC

Reference

• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a

Github

• https://github.com/0xMarcio/cve
• https://github.com/20142995/sectool
• https://github.com/3yujw7njai/CVE-2023-0386
• https://github.com/AabyssZG/AWD-Guide
• https://github.com/Anekant-Singhai/Exploits
• https://github.com/Awrrays/Pentest-Tips
• https://github.com/CKevens/CVE-2023-0386
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/DataDog/security-labs-pocs
• https://github.com/Disturbante/Linux-Pentest
• https://github.com/EGI-Federation/SVG-advisories
• https://github.com/EstamelGG/CVE-2023-0386-libs
• https://github.com/Fanxiaoyao66/CVE-2023-0386
• https://github.com/Fanxiaoyao66/Hack-The-Box-TwoMillion
• https://github.com/GhostTroops/TOP
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Satheesh575555/linux-4.19.72_CVE-2023-0386
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE
• https://github.com/Threekiii/CVE
• https://github.com/abylinjohnson/linux-kernel-exploits
• https://github.com/beruangsalju/LocalPrivilegeEscalation
• https://github.com/chenaotian/CVE-2023-0386
• https://github.com/churamanib/CVE-2023-0386
• https://github.com/djytmdj/Tool_Summary
• https://github.com/hktalent/TOP
• https://github.com/hshivhare67/kernel_v4.19.72_CVE-2023-0386
• https://github.com/hungslab/awd-tools
• https://github.com/izj007/wechat
• https://github.com/johe123qwe/github-trending
• https://github.com/letsr00t/CVE-2023-0386
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/puckiestyle/CVE-2023-0386
• https://github.com/shungo0222/shungo0222
• https://github.com/silentEAG/awesome-stars
• https://github.com/sxlmnwb/CVE-2023-0386
• https://github.com/talent-x90c/cve_list
• https://github.com/toastydz/toastydz.github.io
• https://github.com/toastytoastytoasty/toastydz.github.io
• https://github.com/tycloud97/awesome-stars
• https://github.com/veritas501/CVE-2023-0386
• https://github.com/whoami13apt/files2
• https://github.com/x3t2con/Rttools-2
• https://github.com/x90hack/vulnerabilty_lab
• https://github.com/xairy/linux-kernel-exploitation
• https://github.com/xkaneiki/CVE-2023-0386