CVE-2023-0386
Linux Kernel
Linux Kernel Improper Ownership Management Vulnerability
What it is
Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- access.redhat.com/security/cve/cve-2023-0386
- security.netapp.com/advisory/ntap-20230420-0004/
- nvd.nist.gov/vuln/detail/CVE-2023-0386
Description and required action as published by CISA. Full record at NVD.
Other Linux entries on the list
- Kernel Linux Kernel Missing Initialization of a Variable Vulnerability CVE-2026-46300 · Oct 28, 2026
- Kernel Linux Kernel Out-of-Bounds Write Vulnerability CVE-2026-53266 · Sep 18, 2026
- Kernel Linux Kernel Race Condition Vulnerability CVE-2025-39964 · Sep 18, 2026
- Kernel Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CVE-2025-39682 · Sep 18, 2026
- Kernel Linux Kernel Unspecified Vulnerability CVE-2026-53362 · Aug 27, 2026
- Kernel Linux Kernel Out-of-Bounds Write Vulnerability CVE-2022-0995 · Aug 26, 2026