coldbraid

CVE-2023-0386 Linux Kernel

Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user…

CVSS
not scored

CWE-282

On CISA’s exploited list

Linux Kernel Improper Ownership Management Vulnerability

Added
2025-06-17
Federal patch deadline
2025-07-08
Ransomware use
not known