MiracleLinux 9 : kernel-5.14.0-162.23.1.el9_1 (AXSA:2023-5296:12)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5296:12 advisory. kernel: FUSE filesystem low-privileged user privileges escalation CVE-2023-0386 Tenable has extracted the preceding description block directly from the...

Linux Kernel 3.16.1 FUSE Privilege Escalation

I've been sitting on this for too long. CVE-2014-5207 was an interesting bug found by Kenton Varda and Eric Biederman. Here's a somewhat ugly PoC root exploit. You'll need the ability to use FUSE, although variants would work with removable media or network file systems, too. --Andy / FUSE-based...