Privilege Escalation Vulnerability in Ubuntu OverlayFS
CVE-2023-2640
Key Information:
- Vendor
Canonical
- Status
- Vendor
- CVE Published:
- 26 July 2023
Badges
What is CVE-2023-2640?
A vulnerability in Ubuntu's OverlayFS allows unprivileged users to bypass security checks, enabling them to set privileged extended attributes on files within the mounted filesystem. This flaw could lead to unauthorized access and manipulation of upper files, compromising the integrity and security of the system.
Affected Version(s)
Ubuntu Kernel Linux 0 < 6.2.0-26.26
Ubuntu Kernel Linux 0 < 6.0.0-1020.20
Ubuntu Kernel Linux 0 < 5.4.0-155.172
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
News Articles
Two New Vulnerabilities Could Affect 40% of Ubuntu Cloud Workloads
Two easily exploitable vulnerabilities in the Ubuntu OverlayFS module (CVE-2023-2640 and CVE-2023-32629 could impact 40% of Ubuntu workloads.
2 weeks ago
GameOverlay Vulnerability Impacts 40% of Ubuntu Workloads | Wiz Blog
Wiz Research discovers CVE-2023-2640 & CVE-2023-32629, 2 privilege escalation vulnerabilities in Ubuntu's OverlayFS module impacting 40% of cloud workloads.
2 weeks ago
GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users
Cybersecurity researchers have uncovered high-severity flaws in the Ubuntu kernel, impacting 40% of users!
2 weeks ago
References
EPSS Score
91% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
- 📰
First article discovered by The Hacker News
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved