A flaw was found in the Linux kernel where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

🗓️ 30 Mar 2023 07:00:00Reported by MicrosoftType

Linux kernel OverlayFS flaw lets local users escalate privileges by copying capable files from nosuid mounts.

Reporter	Title	Published	Views	Family All 446
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Apr 202315:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Commons, Tomcat, Go, libcurl, OpenSSL, Python, Node.js, and Linux can affect IBM Spectrum Protect Plus.	20 Jun 202316:49	–	ibm
GithubExploit	Exploit for Improper Ownership Management in Debian Debian_Linux	8 May 202301:53	–	githubexploit
GithubExploit	lpe-toolkit	21 May 202619:33	–	githubexploit
GithubExploit	Exploit for Improper Ownership Management in Debian Debian_Linux	23 Apr 202611:49	–	githubexploit
GithubExploit	Exploit for Improper Ownership Management in Debian Debian_Linux	28 Jun 202307:49	–	githubexploit
GithubExploit	Exploit for CVE-2022-21449	20 Apr 202219:13	–	githubexploit
GithubExploit	Exploit for Improper Ownership Management in Debian Debian_Linux	28 Jun 202619:50	–	githubexploit
GithubExploit	Exploit for Improper Ownership Management in Debian Debian_Linux	6 May 202306:07	–	githubexploit