Unrated severityCISA KEVNVD Advisory· Published Mar 22, 2023· Updated Oct 21, 2025

CVE-2023-0386

Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

111

Linux/Kernelcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
osv-coords109 versions
pkg:rpm/almalinux/bpftool pkg:rpm/almalinux/kernel pkg:rpm/almalinux/kernel-abi-stablelists pkg:rpm/almalinux/kernel-core pkg:rpm/almalinux/kernel-cross-headers pkg:rpm/almalinux/kernel-debug pkg:rpm/almalinux/kernel-debug-core pkg:rpm/almalinux/kernel-debug-devel pkg:rpm/almalinux/kernel-debug-devel-matched pkg:rpm/almalinux/kernel-debug-modules pkg:rpm/almalinux/kernel-debug-modules-extra pkg:rpm/almalinux/kernel-devel pkg:rpm/almalinux/kernel-devel-matched pkg:rpm/almalinux/kernel-doc pkg:rpm/almalinux/kernel-modules pkg:rpm/almalinux/kernel-modules-extra pkg:rpm/almalinux/kernel-rt pkg:rpm/almalinux/kernel-rt-core pkg:rpm/almalinux/kernel-rt-debug pkg:rpm/almalinux/kernel-rt-debug-core pkg:rpm/almalinux/kernel-rt-debug-devel pkg:rpm/almalinux/kernel-rt-debug-kvm pkg:rpm/almalinux/kernel-rt-debug-modules pkg:rpm/almalinux/kernel-rt-debug-modules-extra pkg:rpm/almalinux/kernel-rt-devel pkg:rpm/almalinux/kernel-rt-kvm pkg:rpm/almalinux/kernel-rt-modules pkg:rpm/almalinux/kernel-rt-modules-extra pkg:rpm/almalinux/kernel-tools pkg:rpm/almalinux/kernel-tools-libs pkg:rpm/almalinux/kernel-tools-libs-devel pkg:rpm/almalinux/kernel-zfcpdump pkg:rpm/almalinux/kernel-zfcpdump-core pkg:rpm/almalinux/kernel-zfcpdump-devel pkg:rpm/almalinux/kernel-zfcpdump-devel-matched pkg:rpm/almalinux/kernel-zfcpdump-modules pkg:rpm/almalinux/kernel-zfcpdump-modules-extra pkg:rpm/almalinux/perf pkg:rpm/almalinux/python3-perf pkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/kernel-source-azure&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kernel-syms-azure&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_3&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_6&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_7&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_10&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_11&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_12&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_3&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_6&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4 pkg:rpm/suse/kernel-livepatch-SLE15-SP5-RT_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP4 pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP5 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4 pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4 pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5 pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4
< 4.18.0-425.19.2.el8_7+ 108 more
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 5.14.0-162.23.1.el9_1
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 5.14.0-162.23.1.el9_1
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.rt7.230.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 5.14.0-162.23.1.el9_1
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 4.18.0-425.19.2.el8_7
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.14.49.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1.150400.24.27.1
- (no CPE)range: < 5.14.21-150400.24.63.1.150400.24.27.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.15.28.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.15.28.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.15.28.2
- (no CPE)range: < 5.14.21-150400.14.49.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.15.28.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.14.49.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.15.28.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.14.49.1
- (no CPE)range: < 5.14.21-150400.24.63.1.150400.24.27.1
- (no CPE)range: < 5.14.21-150400.24.63.1.150400.24.27.1
- (no CPE)range: < 5.14.21-150400.24.63.1.150400.24.27.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 6-150400.2.2
- (no CPE)range: < 4-150400.2.2
- (no CPE)range: < 3-150400.2.2
- (no CPE)range: < 2-150400.2.2
- (no CPE)range: < 1-150400.1.5.2
- (no CPE)range: < 14-150400.16.1
- (no CPE)range: < 3-150400.2.3
- (no CPE)range: < 2-150400.2.3
- (no CPE)range: < 1-150400.9.3.1
- (no CPE)range: < 11-150400.2.3
- (no CPE)range: < 10-150400.2.3
- (no CPE)range: < 7-150400.2.3
- (no CPE)range: < 6-150400.2.3
- (no CPE)range: < 1-150500.11.5.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.15.28.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.15.28.2
- (no CPE)range: < 5.14.21-150400.15.28.2
- (no CPE)range: < 5.14.21-150400.15.28.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.14.49.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.15.28.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.14.49.1
- (no CPE)range: < 5.14.21-150400.24.63.1
- (no CPE)range: < 5.14.21-150400.15.28.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.24.63.1

Patches

Vulnerability mechanics

References

www.debian.org/security/2023/dsa-5402mitrevendor-advisory
lists.debian.org/debian-lts-announce/2023/06/msg00008.htmlmitremailing-list
lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlmitremailing-list
packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.htmlmitre
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/mitre
security.netapp.com/advisory/ntap-20230420-0004/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000