Skip to content
7.8 High

CVE-2023-32629 Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission…

Description

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

Affected products and versions

Product Affected versions Fixed in
Ubuntu Kernel Versions not published
ubantu_kernel 6.0 earliest → < 6.0.0-1020.20 6.0.0-1020.20
ubantu_kernel 5.4 earliest → < 5.4.0-155.172 5.4.0-155.172

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of Ubuntu Kernel →
Track this CVE