Back to the CVE list
CVE-2023-0386 CISA KEV · Actively exploited

kernel: FUSE filesystem low-privileged user privileges escalation

CVSS score

7.0

EPSS probability

%7.9

Risk score

1.1

Published

3 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2023-0386 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2023-0386 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Red Hat8Base-RHV-Hypervisor-4:bpftool-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
2Red Hat8Base-RHV-Hypervisor-4:kernel-debug-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
3Red Hat8Base-RHV-Hypervisor-4:kernel-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
4Red Hat8Base-RHV-Hypervisor-4:kernel-debuginfo-common-x86_64-0:4.18.0-372.51.1.el8_6.x86_64 View
5Red Hat8Base-RHV-Hypervisor-4:kernel-devel-0:4.18.0-372.51.1.el8_6.x86_64 View
6Red Hat8Base-RHV-Hypervisor-4:kernel-tools-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
7Red Hat8Base-RHV-Hypervisor-4:perf-0:4.18.0-372.51.1.el8_6.x86_64 View
8Red Hat8Base-RHV-Hypervisor-4:perf-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
9Red Hat8Base-RHV-Hypervisor-4:python3-perf-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
10Red Hat8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.5.3-202304051438_8.6.src View
11Red Hat8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.5.3-202304051438_8.6.x86_64 View
12Red HatAppStream-9.0.0.Z.EUS:bpftool-debuginfo-0:5.14.0-70.53.1.el9_0.aarch64 View
13Red HatAppStream-9.0.0.Z.EUS:bpftool-debuginfo-0:5.14.0-70.53.1.el9_0.ppc64le View
14Red HatAppStream-9.0.0.Z.EUS:bpftool-debuginfo-0:5.14.0-70.53.1.el9_0.s390x View
15Red HatAppStream-9.0.0.Z.EUS:bpftool-debuginfo-0:5.14.0-70.53.1.el9_0.x86_64 View
16Red HatAppStream-9.0.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-70.53.1.el9_0.aarch64 View
17Red HatAppStream-9.0.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-70.53.1.el9_0.ppc64le View
18Red HatAppStream-9.0.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-70.53.1.el9_0.s390x View
19Red HatAppStream-9.0.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-70.53.1.el9_0.x86_64 View
20Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-0:5.14.0-70.53.1.el9_0.aarch64 View
21Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-0:5.14.0-70.53.1.el9_0.ppc64le View
22Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-0:5.14.0-70.53.1.el9_0.s390x View
23Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-0:5.14.0-70.53.1.el9_0.x86_64 View
24Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-70.53.1.el9_0.aarch64 View
25Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-70.53.1.el9_0.ppc64le View
26Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-70.53.1.el9_0.s390x View
27Red HatAppStream-9.0.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-70.53.1.el9_0.x86_64 View
28Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-0:5.14.0-70.53.1.el9_0.aarch64 View
29Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-0:5.14.0-70.53.1.el9_0.ppc64le View
30Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-0:5.14.0-70.53.1.el9_0.s390x View
31Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-0:5.14.0-70.53.1.el9_0.x86_64 View
32Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-70.53.1.el9_0.aarch64 View
33Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-70.53.1.el9_0.ppc64le View
34Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-70.53.1.el9_0.s390x View
35Red HatAppStream-9.0.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-70.53.1.el9_0.x86_64 View
36Red HatAppStream-9.0.0.Z.EUS:kernel-devel-0:5.14.0-70.53.1.el9_0.aarch64 View
37Red HatAppStream-9.0.0.Z.EUS:kernel-devel-0:5.14.0-70.53.1.el9_0.ppc64le View
38Red HatAppStream-9.0.0.Z.EUS:kernel-devel-0:5.14.0-70.53.1.el9_0.s390x View
39Red HatAppStream-9.0.0.Z.EUS:kernel-devel-0:5.14.0-70.53.1.el9_0.x86_64 View
40Red HatAppStream-9.0.0.Z.EUS:kernel-devel-matched-0:5.14.0-70.53.1.el9_0.aarch64 View
41Red HatAppStream-9.0.0.Z.EUS:kernel-devel-matched-0:5.14.0-70.53.1.el9_0.ppc64le View
42Red HatAppStream-9.0.0.Z.EUS:kernel-devel-matched-0:5.14.0-70.53.1.el9_0.s390x View
43Red HatAppStream-9.0.0.Z.EUS:kernel-devel-matched-0:5.14.0-70.53.1.el9_0.x86_64 View
44Red HatAppStream-9.0.0.Z.EUS:kernel-doc-0:5.14.0-70.53.1.el9_0.noarch View
45Red HatAppStream-9.0.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-70.53.1.el9_0.aarch64 View
46Red HatAppStream-9.0.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-70.53.1.el9_0.ppc64le View
47Red HatAppStream-9.0.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-70.53.1.el9_0.s390x View
48Red HatAppStream-9.0.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-70.53.1.el9_0.x86_64 View
49Red HatAppStream-9.0.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-70.53.1.el9_0.s390x View
50Red HatAppStream-9.0.0.Z.EUS:kernel-zfcpdump-devel-0:5.14.0-70.53.1.el9_0.s390x View
51Red HatAppStream-9.0.0.Z.EUS:kernel-zfcpdump-devel-matched-0:5.14.0-70.53.1.el9_0.s390x View
52Red HatAppStream-9.0.0.Z.EUS:perf-0:5.14.0-70.53.1.el9_0.aarch64 View
53Red HatAppStream-9.0.0.Z.EUS:perf-0:5.14.0-70.53.1.el9_0.ppc64le View
54Red HatAppStream-9.0.0.Z.EUS:perf-0:5.14.0-70.53.1.el9_0.s390x View
55Red HatAppStream-9.0.0.Z.EUS:perf-0:5.14.0-70.53.1.el9_0.x86_64 View
56Red HatAppStream-9.0.0.Z.EUS:perf-debuginfo-0:5.14.0-70.53.1.el9_0.aarch64 View
57Red HatAppStream-9.0.0.Z.EUS:perf-debuginfo-0:5.14.0-70.53.1.el9_0.ppc64le View
58Red HatAppStream-9.0.0.Z.EUS:perf-debuginfo-0:5.14.0-70.53.1.el9_0.s390x View
59Red HatAppStream-9.0.0.Z.EUS:perf-debuginfo-0:5.14.0-70.53.1.el9_0.x86_64 View
60Red HatAppStream-9.0.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-70.53.1.el9_0.aarch64 View
61Red HatAppStream-9.0.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-70.53.1.el9_0.ppc64le View
62Red HatAppStream-9.0.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-70.53.1.el9_0.s390x View
63Red HatAppStream-9.0.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-70.53.1.el9_0.x86_64 View
64Red HatAppStream-9.1.0.Z.MAIN:bpftool-debuginfo-0:5.14.0-162.23.1.el9_1.aarch64 View
65Red HatAppStream-9.1.0.Z.MAIN:bpftool-debuginfo-0:5.14.0-162.23.1.el9_1.ppc64le View
66Red HatAppStream-9.1.0.Z.MAIN:bpftool-debuginfo-0:5.14.0-162.23.1.el9_1.s390x View
67Red HatAppStream-9.1.0.Z.MAIN:bpftool-debuginfo-0:5.14.0-162.23.1.el9_1.x86_64 View
68Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-162.23.1.el9_1.aarch64 View
69Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-162.23.1.el9_1.ppc64le View
70Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-162.23.1.el9_1.s390x View
71Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-debuginfo-0:5.14.0-162.23.1.el9_1.x86_64 View
72Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-0:5.14.0-162.23.1.el9_1.aarch64 View
73Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-0:5.14.0-162.23.1.el9_1.ppc64le View
74Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-0:5.14.0-162.23.1.el9_1.s390x View
75Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-0:5.14.0-162.23.1.el9_1.x86_64 View
76Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-162.23.1.el9_1.aarch64 View
77Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-162.23.1.el9_1.ppc64le View
78Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-162.23.1.el9_1.s390x View
79Red HatAppStream-9.1.0.Z.MAIN:kernel-debug-devel-matched-0:5.14.0-162.23.1.el9_1.x86_64 View
80Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-0:5.14.0-162.23.1.el9_1.aarch64 View
81Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-0:5.14.0-162.23.1.el9_1.ppc64le View
82Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-0:5.14.0-162.23.1.el9_1.s390x View
83Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-0:5.14.0-162.23.1.el9_1.x86_64 View
84Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-common-aarch64-0:5.14.0-162.23.1.el9_1.aarch64 View
85Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-common-ppc64le-0:5.14.0-162.23.1.el9_1.ppc64le View
86Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-common-s390x-0:5.14.0-162.23.1.el9_1.s390x View
87Red HatAppStream-9.1.0.Z.MAIN:kernel-debuginfo-common-x86_64-0:5.14.0-162.23.1.el9_1.x86_64 View
88Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-0:5.14.0-162.23.1.el9_1.aarch64 View
89Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-0:5.14.0-162.23.1.el9_1.ppc64le View
90Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-0:5.14.0-162.23.1.el9_1.s390x View
91Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-0:5.14.0-162.23.1.el9_1.x86_64 View
92Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-matched-0:5.14.0-162.23.1.el9_1.aarch64 View
93Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-matched-0:5.14.0-162.23.1.el9_1.ppc64le View
94Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-matched-0:5.14.0-162.23.1.el9_1.s390x View
95Red HatAppStream-9.1.0.Z.MAIN:kernel-devel-matched-0:5.14.0-162.23.1.el9_1.x86_64 View
96Red HatAppStream-9.1.0.Z.MAIN:kernel-doc-0:5.14.0-162.23.1.el9_1.noarch View
97Red HatAppStream-9.1.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-162.23.1.el9_1.aarch64 View
98Red HatAppStream-9.1.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-162.23.1.el9_1.ppc64le View
99Red HatAppStream-9.1.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-162.23.1.el9_1.s390x View
100Red HatAppStream-9.1.0.Z.MAIN:kernel-tools-debuginfo-0:5.14.0-162.23.1.el9_1.x86_64 View
101Red HatAppStream-9.1.0.Z.MAIN:kernel-zfcpdump-debuginfo-0:5.14.0-162.23.1.el9_1.s390x View
102Red HatAppStream-9.1.0.Z.MAIN:kernel-zfcpdump-devel-0:5.14.0-162.23.1.el9_1.s390x View
103Red HatAppStream-9.1.0.Z.MAIN:kernel-zfcpdump-devel-matched-0:5.14.0-162.23.1.el9_1.s390x View
104Red HatAppStream-9.1.0.Z.MAIN:perf-0:5.14.0-162.23.1.el9_1.aarch64 View
105Red HatAppStream-9.1.0.Z.MAIN:perf-0:5.14.0-162.23.1.el9_1.ppc64le View
106Red HatAppStream-9.1.0.Z.MAIN:perf-0:5.14.0-162.23.1.el9_1.s390x View
107Red HatAppStream-9.1.0.Z.MAIN:perf-0:5.14.0-162.23.1.el9_1.x86_64 View
108Red HatAppStream-9.1.0.Z.MAIN:perf-debuginfo-0:5.14.0-162.23.1.el9_1.aarch64 View
109Red HatAppStream-9.1.0.Z.MAIN:perf-debuginfo-0:5.14.0-162.23.1.el9_1.ppc64le View
110Red HatAppStream-9.1.0.Z.MAIN:perf-debuginfo-0:5.14.0-162.23.1.el9_1.s390x View
111Red HatAppStream-9.1.0.Z.MAIN:perf-debuginfo-0:5.14.0-162.23.1.el9_1.x86_64 View
112Red HatAppStream-9.1.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-162.23.1.el9_1.aarch64 View
113Red HatAppStream-9.1.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-162.23.1.el9_1.ppc64le View
114Red HatAppStream-9.1.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-162.23.1.el9_1.s390x View
115Red HatAppStream-9.1.0.Z.MAIN:python3-perf-debuginfo-0:5.14.0-162.23.1.el9_1.x86_64 View
116Red HatBaseOS-8.6.0.Z.EUS:bpftool-0:4.18.0-372.51.1.el8_6.aarch64 View
117Red HatBaseOS-8.6.0.Z.EUS:bpftool-0:4.18.0-372.51.1.el8_6.ppc64le View
118Red HatBaseOS-8.6.0.Z.EUS:bpftool-0:4.18.0-372.51.1.el8_6.s390x View
119Red HatBaseOS-8.6.0.Z.EUS:bpftool-0:4.18.0-372.51.1.el8_6.x86_64 View
120Red HatBaseOS-8.6.0.Z.EUS:bpftool-debuginfo-0:4.18.0-372.51.1.el8_6.aarch64 View
121Red HatBaseOS-8.6.0.Z.EUS:bpftool-debuginfo-0:4.18.0-372.51.1.el8_6.ppc64le View
122Red HatBaseOS-8.6.0.Z.EUS:bpftool-debuginfo-0:4.18.0-372.51.1.el8_6.s390x View
123Red HatBaseOS-8.6.0.Z.EUS:bpftool-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
124Red HatBaseOS-8.6.0.Z.EUS:kernel-0:4.18.0-372.51.1.el8_6.aarch64 View
125Red HatBaseOS-8.6.0.Z.EUS:kernel-0:4.18.0-372.51.1.el8_6.ppc64le View
126Red HatBaseOS-8.6.0.Z.EUS:kernel-0:4.18.0-372.51.1.el8_6.s390x View
127Red HatBaseOS-8.6.0.Z.EUS:kernel-0:4.18.0-372.51.1.el8_6.src View
128Red HatBaseOS-8.6.0.Z.EUS:kernel-0:4.18.0-372.51.1.el8_6.x86_64 View
129Red HatBaseOS-8.6.0.Z.EUS:kernel-abi-stablelists-0:4.18.0-372.51.1.el8_6.noarch View
130Red HatBaseOS-8.6.0.Z.EUS:kernel-core-0:4.18.0-372.51.1.el8_6.aarch64 View
131Red HatBaseOS-8.6.0.Z.EUS:kernel-core-0:4.18.0-372.51.1.el8_6.ppc64le View
132Red HatBaseOS-8.6.0.Z.EUS:kernel-core-0:4.18.0-372.51.1.el8_6.s390x View
133Red HatBaseOS-8.6.0.Z.EUS:kernel-core-0:4.18.0-372.51.1.el8_6.x86_64 View
134Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-0:4.18.0-372.51.1.el8_6.aarch64 View
135Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-0:4.18.0-372.51.1.el8_6.ppc64le View
136Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-0:4.18.0-372.51.1.el8_6.s390x View
137Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-0:4.18.0-372.51.1.el8_6.x86_64 View
138Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-core-0:4.18.0-372.51.1.el8_6.aarch64 View
139Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-core-0:4.18.0-372.51.1.el8_6.ppc64le View
140Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-core-0:4.18.0-372.51.1.el8_6.s390x View
141Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-core-0:4.18.0-372.51.1.el8_6.x86_64 View
142Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-372.51.1.el8_6.aarch64 View
143Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-372.51.1.el8_6.ppc64le View
144Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-372.51.1.el8_6.s390x View
145Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
146Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-devel-0:4.18.0-372.51.1.el8_6.aarch64 View
147Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-devel-0:4.18.0-372.51.1.el8_6.ppc64le View
148Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-devel-0:4.18.0-372.51.1.el8_6.s390x View
149Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-devel-0:4.18.0-372.51.1.el8_6.x86_64 View
150Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-0:4.18.0-372.51.1.el8_6.aarch64 View
151Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-0:4.18.0-372.51.1.el8_6.ppc64le View
152Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-0:4.18.0-372.51.1.el8_6.s390x View
153Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-0:4.18.0-372.51.1.el8_6.x86_64 View
154Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-372.51.1.el8_6.aarch64 View
155Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-372.51.1.el8_6.ppc64le View
156Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-372.51.1.el8_6.s390x View
157Red HatBaseOS-8.6.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-372.51.1.el8_6.x86_64 View
158Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-0:4.18.0-372.51.1.el8_6.aarch64 View
159Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-0:4.18.0-372.51.1.el8_6.ppc64le View
160Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-0:4.18.0-372.51.1.el8_6.s390x View
161Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
162Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-common-aarch64-0:4.18.0-372.51.1.el8_6.aarch64 View
163Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:4.18.0-372.51.1.el8_6.ppc64le View
164Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-common-s390x-0:4.18.0-372.51.1.el8_6.s390x View
165Red HatBaseOS-8.6.0.Z.EUS:kernel-debuginfo-common-x86_64-0:4.18.0-372.51.1.el8_6.x86_64 View
166Red HatBaseOS-8.6.0.Z.EUS:kernel-devel-0:4.18.0-372.51.1.el8_6.aarch64 View
167Red HatBaseOS-8.6.0.Z.EUS:kernel-devel-0:4.18.0-372.51.1.el8_6.ppc64le View
168Red HatBaseOS-8.6.0.Z.EUS:kernel-devel-0:4.18.0-372.51.1.el8_6.s390x View
169Red HatBaseOS-8.6.0.Z.EUS:kernel-devel-0:4.18.0-372.51.1.el8_6.x86_64 View
170Red HatBaseOS-8.6.0.Z.EUS:kernel-doc-0:4.18.0-372.51.1.el8_6.noarch View
171Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-0:4.18.0-372.51.1.el8_6.aarch64 View
172Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-0:4.18.0-372.51.1.el8_6.ppc64le View
173Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-0:4.18.0-372.51.1.el8_6.s390x View
174Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-0:4.18.0-372.51.1.el8_6.x86_64 View
175Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-extra-0:4.18.0-372.51.1.el8_6.aarch64 View
176Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-extra-0:4.18.0-372.51.1.el8_6.ppc64le View
177Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-extra-0:4.18.0-372.51.1.el8_6.s390x View
178Red HatBaseOS-8.6.0.Z.EUS:kernel-modules-extra-0:4.18.0-372.51.1.el8_6.x86_64 View
179Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-0:4.18.0-372.51.1.el8_6.aarch64 View
180Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-0:4.18.0-372.51.1.el8_6.ppc64le View
181Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-0:4.18.0-372.51.1.el8_6.s390x View
182Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-0:4.18.0-372.51.1.el8_6.x86_64 View
183Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-372.51.1.el8_6.aarch64 View
184Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-372.51.1.el8_6.ppc64le View
185Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-372.51.1.el8_6.s390x View
186Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-372.51.1.el8_6.x86_64 View
187Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-libs-0:4.18.0-372.51.1.el8_6.aarch64 View
188Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-libs-0:4.18.0-372.51.1.el8_6.ppc64le View
189Red HatBaseOS-8.6.0.Z.EUS:kernel-tools-libs-0:4.18.0-372.51.1.el8_6.x86_64 View
190Red HatBaseOS-8.6.0.Z.EUS:kernel-zfcpdump-0:4.18.0-372.51.1.el8_6.s390x View
191Red HatBaseOS-8.6.0.Z.EUS:kernel-zfcpdump-core-0:4.18.0-372.51.1.el8_6.s390x View
192Red HatBaseOS-8.6.0.Z.EUS:kernel-zfcpdump-debuginfo-0:4.18.0-372.51.1.el8_6.s390x View
193Red HatBaseOS-8.6.0.Z.EUS:kernel-zfcpdump-devel-0:4.18.0-372.51.1.el8_6.s390x View
194Red HatBaseOS-8.6.0.Z.EUS:kernel-zfcpdump-modules-0:4.18.0-372.51.1.el8_6.s390x View
195Red HatBaseOS-8.6.0.Z.EUS:kernel-zfcpdump-modules-extra-0:4.18.0-372.51.1.el8_6.s390x View
196Red HatBaseOS-8.6.0.Z.EUS:kpatch-patch-4_18_0-372_26_1-0:1-6.el8_6.ppc64le View
197Red HatBaseOS-8.6.0.Z.EUS:kpatch-patch-4_18_0-372_26_1-0:1-6.el8_6.src View
198Red HatBaseOS-8.6.0.Z.EUS:kpatch-patch-4_18_0-372_26_1-0:1-6.el8_6.x86_64 View
199Red HatBaseOS-8.6.0.Z.EUS:kpatch-patch-4_18_0-372_26_1-debuginfo-0:1-6.el8_6.ppc64le View
200Red HatBaseOS-8.6.0.Z.EUS:kpatch-patch-4_18_0-372_26_1-debuginfo-0:1-6.el8_6.x86_64 View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Not affected

Red Hat VEX kaydına göre bu ürün etkilenmiyor.

Red Hat fixes

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.0cvss_v3HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HRed Hat

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

24 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

This CVE is marked as actively exploited in the CISA KEV catalogue, but no verified, downloadable public PoC or Metasploit module has been found yet. Evidence of active exploitation does not mean that public exploit code exists.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2023-0386 is associated with the following CWEs:

CWE-282: Common Weakness Enumeration Entry CWE-282

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2023-0386 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

Canonical URLvendor-advisoryRHBZ#2159505vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2023-0386vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2023-0386vendor-advisoryhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0avendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.patch

CVSS Vector Radar Chart

7.0 / 10
Attack VectorLocalComplexityHighPrivilegesLowUser Interact.NoneConfidentialityHighIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)High
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

24 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

RH
Red Hat logo
Red Hat

Weakness Type (CWE & CAPEC)

CWE-282

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2023-0386"