Local Privilege Escalation Vulnerability in Ubuntu Kernels
CVE-2023-32629
Key Information:
- Vendor
Canonical
- Status
- Vendor
- CVE Published:
- 26 July 2023
Badges
What is CVE-2023-32629?
The local privilege escalation vulnerability in the overlayfs implementation of Ubuntu Kernels allows attackers to bypass permission checks during certain attribute-setting operations. Specifically, when invoking 'ovl_do_setxattr', the requisite permission checks are skipped, potentially leading to unauthorized access and manipulation of system resources. This issue could be exploited by local users to gain elevated privileges, thereby compromising system integrity and security.
Affected Version(s)
Ubuntu Kernel Linux 0 < 6.2.0-26.26
Ubuntu Kernel Linux 0 < 6.0.0-1020.20
Ubuntu Kernel Linux 0 < 5.4.0-155.172
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
News Articles
GameOverlay Vulnerability Impacts 40% of Ubuntu Workloads | Wiz Blog
Wiz Research discovers CVE-2023-2640 & CVE-2023-32629, 2 privilege escalation vulnerabilities in Ubuntu's OverlayFS module impacting 40% of cloud workloads.
2 weeks ago
GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users
Cybersecurity researchers have uncovered high-severity flaws in the Ubuntu kernel, impacting 40% of users!
2 weeks ago
References
EPSS Score
58% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
- 📰
First article discovered by The Hacker News
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved