Skip to content
OpenAdvisories
High · 7.8 Known exploited Public exploit CVE-2023-0386 EUVD-2023-12447GHSA-p72q-v88c-rprq

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linu…

Published Mar 22, 2023 · Updated Oct 21, 2025 · Assigned by redhat

Package: kernel Package: linux Package: linux Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.3 Package: linux-aws-5.8 Package: linux-azure Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.8 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-azure-fde-5.19 Package: linux-bluefield Package: linux-gcp Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.3 Package: linux-gcp-5.8 Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.8 Package: linux-hwe-edge Package: linux-ibm Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-nvidia Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.8 Package: linux-raspi Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.8 Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Affected products

VendorProductAffectedFixed
— Kernel Linux kernel 6.2-rc6 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.1.11-1 —
Debian 13 linux 6.1.11-1 —
Debian 12 linux 6.1.11-1 —
Debian 11 linux 5.10.179-1 DSA-5402-1
Debian 10 linux 4.19.316-1 DLA-3840-1
Debian 10 linux-5.10 5.10.179-1~deb10u1 DLA-3446-1
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1015.17 —
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux +1 5.15.0-70.77 USN-6025-1
Ubuntu 22.04 LTS linux-aws 5.15.0-1034.38 USN-6025-1
Ubuntu 22.04 LTS linux-azure 5.15.0-1036.43 USN-6025-1
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1036.43.1 USN-6025-1
Ubuntu 22.04 LTS linux-gcp 5.15.0-1032.40 USN-6025-1
Ubuntu 22.04 LTS linux-gke +1 5.15.0-1031.36 USN-6025-1
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1018.23 USN-6025-1
Ubuntu 22.04 LTS linux-hwe-5.19 5.19.0-41.42~22.04.1 USN-6043-1
Ubuntu 22.04 LTS linux-ibm 5.15.0-1028.31 USN-6025-1
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1028.33 USN-6057-1
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1023.23 —
Ubuntu 22.04 LTS linux-oem-5.17 5.17.0-1031.32 USN-6071-1
Ubuntu 22.04 LTS linux-oem-6.0 6.0.0-1015.15 USN-6072-1
Ubuntu 22.04 LTS linux-oem-6.1 6.1.0-1008.8 —
Ubuntu 22.04 LTS linux-oracle 5.15.0-1033.39 USN-6025-1
Ubuntu 22.04 LTS linux-raspi 5.15.0-1027.29 USN-6025-1
Ubuntu 22.04 LTS linux-riscv +4 No fix yet —
Ubuntu 20.04 LTS linux-aws-5.15 5.15.0-1034.38~20.04.1 USN-6025-1
Ubuntu 20.04 LTS linux-azure-5.15 5.15.0-1036.43~20.04.1 USN-6025-1
Ubuntu 20.04 LTS linux-azure-fde-5.15 5.15.0-1036.43~20.04.1.1 —
Ubuntu 20.04 LTS linux-gcp-5.15 5.15.0-1032.40~20.04.1 USN-6025-1
Ubuntu 20.04 LTS linux-gke-5.15 5.15.0-1031.36~20.04.1 USN-6025-1
Ubuntu 20.04 LTS linux-gkeop-5.15 5.15.0-1018.23~20.04.1 —
Ubuntu 20.04 LTS linux-hwe-5.15 +1 5.15.0-70.77~20.04.1 USN-6040-1, USN-6025-1
Ubuntu 20.04 LTS linux-intel-iotg-5.15 5.15.0-1030.35~20.04.1 USN-6134-1
Ubuntu 20.04 LTS linux-oracle-5.15 5.15.0-1033.39~20.04.1 USN-6025-1
Ubuntu 20.04 LTS linux-riscv +23 No fix yet —
Ubuntu 20.04 LTS linux-riscv-5.15 5.15.0-1031.35~20.04.1 —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1024.29 —
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1036.39 —
Ubuntu Pro 22.04 LTS linux +1 5.15.0-73.80 LSN-0095-1
Ubuntu Pro 22.04 LTS linux-aws 5.15.0-1037.41 LSN-0095-1
Ubuntu Pro 22.04 LTS linux-azure 5.15.0-1039.46 LSN-0095-1
Ubuntu Pro 22.04 LTS linux-gcp 5.15.0-1035.43 LSN-0095-1
Ubuntu Pro 22.04 LTS linux-gke 5.15.0-1034.39 LSN-0095-1
Ubuntu Pro 22.04 LTS linux-ibm 5.15.0-1031.34 LSN-0095-1
Ubuntu Pro 20.04 LTS linux 5.4.0-150.167 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-aws 5.4.0-1103.111 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-aws-5.15 5.15.0-1037.41~20.04.1 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-azure 5.4.0-1109.115 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-gcp 5.4.0-1106.115 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-gcp-5.15 5.15.0-1035.43~20.04.1 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-gke 5.4.0-1100.107 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-gke-5.15 5.15.0-1034.39~20.04.1 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-gkeop 5.4.0-1070.74 LSN-0095-1
Ubuntu Pro 20.04 LTS linux-ibm 5.4.0-1050.55 LSN-0095-1
Ubuntu Pro 18.04 LTS linux-aws-5.4 5.4.0-1103.111~18.04.1 LSN-0095-1
Ubuntu Pro 18.04 LTS linux-azure-5.4 5.4.0-1109.115~18.04.1 LSN-0095-1
Ubuntu Pro 18.04 LTS linux-gcp-5.4 5.4.0-1106.115~18.04.1 LSN-0095-1
Ubuntu Pro 18.04 LTS linux-gke-5.4 +1 No fix yet LSN-0095-1
Ubuntu Pro 18.04 LTS linux-hwe-5.4 5.4.0-150.167~18.04.1 LSN-0095-1
Ubuntu Pro 18.04 LTS linux-ibm-5.4 5.4.0-1050.55~18.04.1 LSN-0095-1
ReleasePackageFixed inAdvisory
RHEL 9 kernel-rt +12 5.14.0-162.23.1.rt21.186.el9_1 RHSA-2023:1691
RHEL 9 kpatch-patch-5_14_0-162_12_1 1-3.el9_1 RHSA-2023:1681
RHEL 9 kpatch-patch-5_14_0-162_18_1 1-2.el9_1 RHSA-2023:1681
RHEL 9 kpatch-patch-5_14_0-162_22_2 1-1.el9_1 RHSA-2023:1681
RHEL 9 kpatch-patch-5_14_0-162_6_1 1-4.el9_1 RHSA-2023:1681
RHEL 9 perf +29 5.14.0-162.23.1.el9_1 RHSA-2023:1703
RHEL 8 kernel-rt +12 4.18.0-425.19.2.rt7.230.el8_7 RHSA-2023:1584
RHEL 8 kpatch-patch-4_18_0-425_10_1 1-4.el8_7 RHSA-2023:1659
RHEL 8 kpatch-patch-4_18_0-425_13_1 1-2.el8_7 RHSA-2023:1659
RHEL 8 kpatch-patch-4_18_0-425_3_1 1-6.el8 RHSA-2023:1659
RHEL 8 perf +26 4.18.0-425.19.2.el8_7 RHSA-2023:1566
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhev Hypervisor 4 perf +2 4.18.0-372.51.1.el8_6 RHSA-2023:1554
Red Hat Rhev Hypervisor 4 redhat-virtualization-host +1 4.5.3-202304051438_8.6 RHSA-2023:1677
RHEL 9.0 EUS kernel-rt +12 5.14.0-70.53.1.rt21.124.el9_0 RHSA-2023:1980
RHEL 9.0 EUS kpatch-patch-5_14_0-70_30_1 1-5.el9_0 RHSA-2023:1984
RHEL 9.0 EUS kpatch-patch-5_14_0-70_36_1 1-4.el9_0 RHSA-2023:1984
RHEL 9.0 EUS kpatch-patch-5_14_0-70_43_1 1-3.el9_0 RHSA-2023:1984
RHEL 9.0 EUS kpatch-patch-5_14_0-70_49_1 1-2.el9_0 RHSA-2023:1984
RHEL 9.0 EUS kpatch-patch-5_14_0-70_50_2 1-1.el9_0 RHSA-2023:1984
RHEL 9.0 EUS perf +29 5.14.0-70.53.1.el9_0 RHSA-2023:1970
RHEL 8.6 EUS kpatch-patch-4_18_0-372_26_1 1-6.el8_6 RHSA-2023:1660
RHEL 8.6 EUS kpatch-patch-4_18_0-372_32_1 1-5.el8_6 RHSA-2023:1660
RHEL 8.6 EUS kpatch-patch-4_18_0-372_36_1 +1 1-4.el8_6 RHSA-2023:1660
RHEL 8.6 EUS kpatch-patch-4_18_0-372_41_1 1-3.el8_6 RHSA-2023:1660
RHEL 8.6 EUS kpatch-patch-4_18_0-372_46_1 1-1.el8_6 RHSA-2023:1660
RHEL 8.6 EUS perf +26 4.18.0-372.51.1.el8_6 RHSA-2023:1554

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 kernel-rt +11 5.14.0-162.23.1.rt21.186.el9_1 ALSA-2023:1691
AlmaLinux 9 perf +26 5.14.0-162.23.1.el9_1 ALSA-2023:1703
AlmaLinux 8 kernel-rt +11 4.18.0-425.19.2.rt7.230.el8_7 ALSA-2023:1584
AlmaLinux 8 perf +23 4.18.0-425.19.2.el8_7 ALSA-2023:1566

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 kernel 4.18.0-425.19.2.el8_7 RXSA-2023:1566, RLSA-2023:1566
Rocky Linux 8 kernel-rt 4.18.0-425.19.2.rt7.230.el8_7 RLSA-2023:1584
ReleasePackageFixed inAdvisory
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.63.1 SUSE-SU-2023:2140-1
SLES 15 SP4 kernel-azure +2 5.14.21-150400.14.49.1 SUSE-SU-2023:2141-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.63.1.150400.24.27.1 SUSE-SU-2023:2140-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 5.4 kernel-default 5.14.21-150400.24.63.1 SUSE-SU-2023:2140-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.63.1.150400.24.27.1 SUSE-SU-2023:2140-1
SLE Micro 5.4 kernel-rt 5.14.21-150400.15.28.2 SUSE-SU-2023:2231-1
SLE Micro 5.3 kernel-default 5.14.21-150400.24.63.1 SUSE-SU-2023:2140-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.63.1.150400.24.27.1 SUSE-SU-2023:2140-1
SLE Micro 5.3 kernel-rt 5.14.21-150400.15.28.2 SUSE-SU-2023:2231-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5-RT_Update_1 1-150500.11.5.1 SUSE-SU-2023:2809-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.63.1 SUSE-SU-2023:2140-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_1 6-150400.2.2 SUSE-SU-2023:2371-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_3 4-150400.2.2 SUSE-SU-2023:2384-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_5 3-150400.2.2 SUSE-SU-2023:2369-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_6 2-150400.2.2 SUSE-SU-2023:2368-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_7 1-150400.1.5.2 SUSE-SU-2023:2231-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_0 14-150400.16.1 SUSE-SU-2023:2468-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_1 11-150400.2.3 SUSE-SU-2023:2425-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_10 3-150400.2.3 SUSE-SU-2023:2459-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_11 2-150400.2.3 SUSE-SU-2023:2428-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_12 1-150400.9.3.1 SUSE-SU-2023:2140-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_3 10-150400.2.3 SUSE-SU-2023:2455-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_5 7-150400.2.3 SUSE-SU-2023:2443-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_6 6-150400.2.3 SUSE-SU-2023:2431-1
SUSE Real Time Module 15 SP5 kernel-rt +3 5.14.21-150500.13.5.1 SUSE-SU-2023:2809-1
SUSE Real Time Module 15 SP4 kernel-rt +1 5.14.21-150400.15.28.2 SUSE-SU-2023:2231-1
SUSE Real Time Module 15 SP4 kernel-syms-rt +1 5.14.21-150400.15.28.1 SUSE-SU-2023:2231-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.5 kernel-rt +3 5.14.21-150500.13.5.1 SUSE-SU-2023:2809-1
openSUSE Leap 15.4 dtb-aarch64 +10 5.14.21-150400.24.63.1 SUSE-SU-2023:2140-1
openSUSE Leap 15.4 kernel-azure +2 5.14.21-150400.14.49.1 SUSE-SU-2023:2141-1
openSUSE Leap 15.4 kernel-default-base 5.14.21-150400.24.63.1.150400.24.27.1 SUSE-SU-2023:2140-1
openSUSE Leap 15.4 kernel-rt +1 5.14.21-150400.15.28.2 SUSE-SU-2023:2231-1
openSUSE Leap 15.4 kernel-syms-rt +1 5.14.21-150400.15.28.1 SUSE-SU-2023:2231-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.3 kernel-default 5.14.21-150400.24.63.1 SUSE-SU-2023:2140-1
openSUSE Leap Micro 5.3 kernel-default-base 5.14.21-150400.24.63.1.150400.24.27.1 SUSE-SU-2023:2140-1
openSUSE Leap Micro 5.3 kernel-rt 5.14.21-150400.15.28.2 SUSE-SU-2023:2231-1

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) kernel 5.15.107.1-2 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 perf +21 5.14.0-162.23.1.el9_1 ELSA-2023-1703
Oracle Linux 8 perf +19 4.18.0-425.19.2.el8_7 ELSA-2023-1566

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

GitHub 18 repositories · most starred shown

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 49

References