67 matches found
CVE-2025-6019
CVE-2025-6019 개념 증명 PoC 이 저장소는 libblockdev 및 udisks의 CVE-2025-6019 , 즉 로컬 권한 상승LPE 취약점에 대한 개념 증명PoC 스크립트를 포함합니다. 스크립트는 SUID bash 바이너리가 포함된 XFS 파일시스템 이미지를 생성하고, nosuid 옵션 없이 마운트할 수 있도록 취약점을 악용하여 루트 셸을 획득합니다. 경고 : 이 PoC는 교육 및 테스트 목적으로만 제공됩니다. 승인된 시스템에서만 사용하십시오. 무단 사용은 불법이며 비윤리적입니다. 특징 로컬 모드 : 300 M...
CVE-2023-0386
在 Linux 内核中发现了一个缺陷：在 Linux 内核的 OverlayFS 子系统中，当用户将具有 capabilities 的文件从 nosuid 挂载点复制到另一个挂载点时，存在对具有 capabilities 的 setuid 文件执行的未授权访问。此 uid 映射错误允许本地用户在系统上提升其权限。 参见：https://ubuntu.com/security/CVE-2023-0386 编译 root@kitploit: make all 使用 启动两个终端，并在第一个终端中输入 root@kitploit: ./fuse ./ovlcap/lower ./gc...
CVE-2023-0386_POC
Team CVE-MD This repository provides a proof of concept for CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Team members: Bǎnicǎ Dragoș-Marius and Borsos Matheas-Roland Here is the video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Linux OverlayFS Local Privilege...
CVE-2026-53614
Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount8...
UBUNTU-CVE-2026-53614
Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount8...
PT-2026-53079
Name of the Vulnerable Software and Affected Versions openSUSE Tumbleweed versions prior to 2.42.2-1.1 Description A local privilege escalation exists in the SUID mount8 utility. An attacker can bypass nosuid and noexec restrictions by manipulating the LIBMOUNT FORCE MOUNT2 environment variable...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005482)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005482 advisory. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernels OverlayFS...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000736)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000736 advisory. fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount o...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-004801)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004801 advisory. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernels OverlayFS...
EUVD-1999-1061
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2023-0386
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel's OverlayFS...
Linux Distros Unpatched Vulnerability : CVE-2021-3847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a...
AZL-64187 CVE-2025-6019 affecting package libblockdev 2.28-3
A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...
VulnCheck KEV: CVE-2023-0386
Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping...
An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.
...
SUSE CVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel's OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...
kernel: FUSE filesystem low-privileged user privileges escalation
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...
kernel: FUSE filesystem low-privileged user privileges escalation
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...
RHEL 9 : kernel (RHSA-2023:1970)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1970 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: FUSE filesystem low-privileged user...
kernel: FUSE filesystem low-privileged user privileges escalation
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...