CVE-2023-32629
HIGH 7.8EPSS 9.1%
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
- Affected
- Canonical · Ubuntu Kernel
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 9.05% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2023-07-26
- Updated
- 2025-02-13
Proof-of-concept exploits (14)
- 0xWhoami35/root-kernel0★ · 2026-07-21
- K5LK/CVE-2023-2640-326291★ · 2024-05-22
- Nkipohcs/CVE-2023-2640-CVE-2023-326291★ · 2024-03-19
- ThrynSec/CVE-2023-32629-CVE-2023-2640---POC-Escalation108★ · 2023-11-15
- druxter-x/PHP-CVE-2023-2023-2640-POC-Escalation0★ · 2024-02-15
- g1vi/CVE-2023-2640-CVE-2023-32629137★ · 2023-10-09
- luanoliveira350/GameOverlayFS17★ · 2023-09-17
- musorblyat/CVE-2023-2640-CVE-2023-326292★ · 2023-11-02
- vinetsuicide/CVE-2023-2640-CVE-2023-326292★ · 2023-11-02
- xS9NTX/CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC1★ · 2023-12-13
- ChouzBui897/cve-research-exploitation0★ · 2026-05-27
- WhatsWrongAndWhy/CVE-2023-2640-CVE-2023-326290★ · 2026-07-22
- amar-imamovic/CVE-2023-2640-CVE-2023-32629-Interactive-PoC0★ · 2026-06-10
- foiscs/security_project40★ · 2026-05-10
Metasploit modules (1)
Security advisories
- https://ubuntu.com/security/notices/USN-6250-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629
- https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html