Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-32629

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

Description

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Canonical Ubuntu Kernel

Default version status: unaffected

  • 0 to < 6.2.0-26.26unaffected
  • 0 to < 6.0.0-1020.20unaffected
  • 0 to < 5.4.0-155.172unaffected

References