CVE-2023-32629
HIGH 7.8EPSS 10.4%
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 10.36% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2023-07-26
- Updated
- 2025-02-13
Proof-of-concept exploits (14)
- 0xWhoami35/root-kernel0★ · 2026-07-21
- K5LK/CVE-2023-2640-326291★ · 2024-05-22
- Nkipohcs/CVE-2023-2640-CVE-2023-326291★ · 2024-03-19
- ThrynSec/CVE-2023-32629-CVE-2023-2640---POC-Escalation108★ · 2023-11-15
- druxter-x/PHP-CVE-2023-2023-2640-POC-Escalation0★ · 2024-02-15
- g1vi/CVE-2023-2640-CVE-2023-32629136★ · 2023-10-09
- luanoliveira350/GameOverlayFS17★ · 2023-09-17
- musorblyat/CVE-2023-2640-CVE-2023-326292★ · 2023-11-02
- vinetsuicide/CVE-2023-2640-CVE-2023-326292★ · 2023-11-02
- xS9NTX/CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC1★ · 2023-12-13
- ChouzBui897/cve-research-exploitation
- WhatsWrongAndWhy/CVE-2023-2640-CVE-2023-32629
- amar-imamovic/CVE-2023-2640-CVE-2023-32629-Interactive-PoC
- foiscs/security_project4