OverlayFS metadata copy-up privesc (CVE-2023-0386)

Aynı bug/CVE: bkz. canonical overlayfs copy-up UID race (CVE-2023-0386).

Mechanism

Bu not, OverlayFS copy-up'taki eksik user-namespace ownership check'inin (CVE-2023-0386) ayrı bir adı. Tam mekanizma canonical not'ta: overlayfs copy-up UID race (CVE-2023-0386).

Walkthrough

Tam walkthrough canonical not'ta: overlayfs copy-up UID race (CVE-2023-0386).

References

• The OverlayFS vulnerability CVE-2023-0386 (Datadog Security Labs)
• DataDog/security-labs-pocs: overlayfs-cve-2023-0386
• CVE-2023-0386 OverlayFS privilege escalation (Armis)