Local Privilege Escalation Vulnerability in Ubuntu Kernels

CVE-2023-32629

Summary

The local privilege escalation vulnerability in the overlayfs implementation of Ubuntu Kernels allows attackers to bypass permission checks during certain attribute-setting operations. Specifically, when invoking 'ovl_do_setxattr', the requisite permission checks are skipped, potentially leading to unauthorized access and manipulation of system resources. This issue could be exploited by local users to gain elevated privileges, thereby compromising system integrity and security.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-32629-CVE-2023-2640---POC-Escalation
Created by ThrynSec

Metasploit exploit module for CVE-2023-32629
Created by Rapid7

Check-for-CVE-2023-32629-GameOver-lay
Created by kaotickj

More PoCs...

References