Back to CVE Lookup
CVE-2023-0386
HIGH - CVSS 7.8CWE-282
Published: 3/22/2023
Modified: 11/4/2025
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
Vulnerability Summary
CVSS v3 Score
7.8HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H