Known Exploited Vulnerabilities June 17, 2025 · CISA KEV Catalog

CVE-2023-0386: Linux Kernel Improper Ownership Management Vulnerability

Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2023-0386Linux

Related

CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability Known Exploited Vulnerabilities · Oct 28, 2026

CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability Known Exploited Vulnerabilities · Sep 18, 2026

CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability Known Exploited Vulnerabilities · Sep 18, 2026