HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2023-0386

CVSS 7.8v3.1pub. 2023-03-22upd. 2025-11-04

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Canonical Ubuntu
OS
Canonical
18.0420.0422.04
Debian
OS
Debian
10.0
Linux Kernel
OS
Linux
6.25.16 – 6.1.9 (excl.)5.11 – 5.15.91 (excl.)
Netapp H300s
HW
Netapp
all versions
Netapp H300s Firmware
OS
Netapp
all versions
Netapp H410c
HW
Netapp
all versions
Netapp H410c Firmware
OS
Netapp
all versions
Netapp H410s
HW
Netapp
all versions
Netapp H410s Firmware
OS
Netapp
all versions
Netapp H500s
HW
Netapp
all versions
Netapp H500s Firmware
OS
Netapp
all versions
Netapp H700s
HW
Netapp
all versions
Netapp H700s Firmware
OS
Netapp
all versions

CISA KEV — detailsi

Vendori: Linux
Producti: Kernel
Added to KEVi: June 17, 2025
Remediation deadline (US Federal)i: July 8, 2025(overdue)

🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA descriptioni

Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

🔴