CVE-2023-32629: high-severity vulnerability in Canonical Ubuntu Kernel
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
A flaw in Ubuntu's kernel allows a local user to gain higher system privileges by bypassing permission checks in the overlayfs feature. An attacker already logged into the system can exploit this to execute commands with administrator rights.
Local privilege escalation in overlayfs ovl_copy_up_meta_inode_data function that skips permission validation during ovl_do_setxattr calls. Attack vector requires local access; pre-condition is ability to interact with overlayfs mounts. Impact allows unprivileged users to escalate to root.
In the same product, most dangerous first.