https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:30:53.513268+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-1386 CVE-2023-1386 — Qemu: 9pfs: suid/sgid bits not dropped on file write 2026-10-08T10:30:53.529205+00:00

Affected: qemu, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization, Red Hat Enterprise Linux 9, Fedora, Fedora Extra Packages for Enterprise Linux

A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host.