CVE-2023-32629

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

La vulnerabilidad de escalada de privilegios locales en los kernels de Ubuntu que superpone ovl_copy_up_meta_inode_data omite comprobaciones de permisos al llamar a ovl_do_setxattr en kernels de Ubuntu

*Credits: Shir Tamari, Sagi Tzadik

CVSS Scores

NISTv3.1 7.8

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-06-29 CVE Reserved
2023-07-26 CVE Published
2023-10-09 First Exploit
2023-11-17 EPSS Updated
2024-10-23 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-863: Incorrect Authorization

CAPEC

References (11)

URL	Tag	Source
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629	Issue Tracking

URL	Date	SRC
https://github.com/ThrynSec/CVE-2023-32629-CVE-2023-2640---POC-Escalation	2023-11-15
https://github.com/xS9NTX/CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC	2023-11-14
https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629	2023-10-09
https://github.com/kaotickj/Check-for-CVE-2023-32629-GameOver-lay	2023-10-27
https://github.com/Nkipohcs/CVE-2023-2640-CVE-2023-32629	2024-03-19
https://github.com/musorblyat/CVE-2023-2640-CVE-2023-32629	2023-11-02
https://wiz.io/blog/ubuntu-overlayfs-vulnerability	2024-10-23

URL	Date	SRC
https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html	2023-09-11

URL	Date	SRC
https://ubuntu.com/security/notices/USN-6250-1	2023-09-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				23.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "23.04"		-		Affected