CVE-2023-0386 PoC — Linux kernel 安全漏洞

Source

Associated Vulnerability

Readme

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

see : https://ubuntu.com/security/CVE-2023-0386

Compile
```bash
make all
```
# Use
Start two terminals and enter in the first terminal
```bash
./fuse ./ovlcap/lower ./gc
```
In the second terminal enter
```bash
./exp
```
# Effect
Privilege escalation

File Snapshot

 [4.0K]  /data/pocs/cc70cf7b5dad2e4fb947c427cf8102556c06744d
├── [3.0K]  exp.c
├── [5.5K]  fuse.c
├── [ 549]  getshell.c
├── [ 150]  Makefile
├── [4.0K]  ovlcap
├── [ 586]  README.md
└── [4.0K]  test
    ├── [ 10K]  fuse_test.c
    ├── [ 16K]  mnt
    └── [1.5K]  mnt.c

2 directories, 8 files

Remarks