7.8
High
CVE-2023-2640 On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for…
Description
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ubuntu Kernel | Versions not published | |
| ubantu_kernel 6.2 | earliest → < 6.2.0-26.26 | 6.2.0-26.26 |
| ubantu_kernel 6.0 | earliest → < 6.0.0-1020.20 | 6.0.0-1020.20 |
| ubantu_kernel 5.4 | earliest → < 5.4.0-155.172 | 5.4.0-155.172 |