CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel OverlayFS Local Privilege Escalation Vulnerability (CVE-2023-0386) Analysis and Mitigation Guide
[Affected Scope] Systems and container environments utilizing the Linux kernel OverlayFS subsystem
[Impact] A local attacker can escalate privileges to root by copying a setuid/capable file from a nosuid mount into another mount
[Mitigation] Apply the latest kernel security patches from your distribution or restrict unprivileged user namespaces as a temporary workaround
Ubuntu Linux Kernel OverlayFS Local Privilege Escalation Vulnerability (CVE-2021-3493) Analysis and Mitigation Guide
[Affected Scope] Ubuntu Linux kernel versions with unprivileged user namespaces and OverlayFS mounting enabled
[Impact] A local unprivileged attacker can exploit improper file capability validation to gain full root privileges on the host
[Mitigation] Upgrade to the latest patched Ubuntu kernel and reboot, or temporarily disable unprivileged user namespaces