CVE-2023-32629
Summary
| CVE | CVE-2023-32629 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-07-26 02:15:00 UTC |
|---|
| Updated | 2023-09-11 19:15:00 UTC |
|---|
| Description | Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Kernel Live Patch Security Notice LSN-0097-1 ≈ Packet Storm |
MISC |
packetstormsecurity.com |
|
| [SRU Focal 1/1] ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs |
MISC |
lists.ubuntu.com |
|
| Page not found | Wiz |
MISC |
wiz.io |
|
| CVE -
CVE-2023-32629 |
MISC |
cve.mitre.org |
|
| USN-6250-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
MISC |
ubuntu.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 199608 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6250-1)
- 199610 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6248-1)
- 199613 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6251-1)
- 199618 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6260-1)
- 199623 Ubuntu Security Notification for Linux kernel (IoT) Vulnerabilities (USN-6261-1)
- 199651 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6285-1)
