PoC Index 85,079 CVEs with PoCs

CVE-2023-0386

KEVHIGH 7.8EPSS 7.9%

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Affected: Kernel
CVSS v3.1 NVD: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 7.88% chance of exploitation in the next 30 days, 95th percentile
CISA KEV: added 2025-06-17
Published: 2023-03-22
Updated: 2025-10-21

Proof-of-concept exploits (26)

3yujw7njai/CVE-2023-03864★ · 2023-05-08
AiK1d/CVE-2023-03864★ · 2023-05-08
CKevens/CVE-2023-03864★ · 2023-05-08
EstamelGG/CVE-2023-0386-libs0★ · 2024-04-23
Fanxiaoyao66/CVE-2023-038621★ · 2023-06-28
P4x1s/CVE-2023-03864★ · 2023-05-08
Satheesh575555/linux-4.19.72_CVE-2023-03864★ · 2023-05-04
chenaotian/CVE-2023-0386123★ · 2023-05-06
churamanib/CVE-2023-03860★ · 2024-04-05
kp18-cpu/Computer_System_Security0★ · 2025-06-21
kp18-cpu/Vulnerability_in_suid_libraries0★ · 2025-06-20
letsr00t/CVE-2023-03860★ · 2024-02-29
orilevy8/cve-2023-03861★ · 2025-03-17
puckiestyle/CVE-2023-038622★ · 2023-12-23
ramoa1234/Rowhammer0★ · 2025-07-04
sxlmnwb/CVE-2023-038656★ · 2023-05-16
veritas501/CVE-2023-038610★ · 2023-04-20
xkaneiki/CVE-2023-0386416★ · 2023-06-13
dragosbanica/CVE-2023-0386_POC0★ · 2026-01-20
huovnn/CVE-2023-0386-go-poc0★ · 2026-02-07
pwncone/CVE-2023-0386-OverlayFS0★ · 2026-06-29
Anekant-Singhai/Exploits2★ · 2024-05-04
ChristopherPatrickKuntz/bifrost-infrastructure-disclosure0★ · 2026-09-07
DataDog/security-labs-pocs451★ · 2026-09-14
h4rithd/PrecompiledBinaries45★ · 2026-06-22
weto91/GitHub_Search_CVE0★ · 2026-04-27

Metasploit modules (1)

rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overla…

Security advisories

References

Related