CVE-2023-0386· linux / kernel· CWE-282
Linux Kernel Improper Ownership Management Vulnerability
Exploited in the wild. Listed by CISA on 2025-06-17; known to be used by ransomware.
7.9%likelihood of exploitation, next 30 days
95%of all CVEs are less likely
Nonecheck to confirm it
Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from