CVE-2023-0386 PoC — Linux kernel 安全漏洞

Source

https://github.com/xkaneiki/CVE-2023-0386

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2023-0386)
Description:A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

Description

CVE-2023-0386在ubuntu22.04上的提权

Readme

# 编译
```bash
make all
```
# 使用
启动两个终端，在第一个终端中输入
```bash
./fuse ./ovlcap/lower ./gc
```
在第二个终端输入
```bash
./exp
```
# 效果
提权效果
![展示效果](./result.jpeg)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!