Name: CVE-2023-32629: Incorrect Authorization
Creator: Rapid7
Published: 2023-07-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-32629, CWE-863, Metasploit Module, CVSS 7.8, EPSS 0.0883

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Ubuntu	—	Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-5.15.0-1100-ibmUpgrade linux-image-genericUpgrade linux-image-5.15.0-177-fipsUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-177-generic-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1104-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1106-aws-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1106-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1089-gkeopUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-azure-fipsUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.15.0-1106-aws-fipsUpgrade linux-image-5.15.0-177-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-ibm-5.15Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1101-nvidia-lowlatencyUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1058-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1058-nvidia-tegra-rtUpgrade linux-image-5.15.0-177-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.15.0-1111-azureUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-5.15.0-1102-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1098-intel-iot-realtimeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-nvidiaUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-177-genericUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1105-realtimeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-5.15.0-1047-nvidia-tegra-igx-rtUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1101-intel-iotgUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1047-nvidia-tegra-igxUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-aws-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-1008-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.15.0-177-lowlatency-64kUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1106-gcp-fipsUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-5.15.0-1103-oracleUpgrade linux-image-5.15.0-1101-nvidiaUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1098-kvmUpgrade linux-image-5.15.0-1111-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1100-raspiUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.1.0-1019-oem	Jul 26, 2023	Jul 25, 2023

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence