CVE-2023-2640: canonical ubuntu_linux Incorrect Authorization

Modified

AliasesUBUNTU-CVE-2023-2640

Published 26-07-2023Last modified 23-10-2024

Vulnerability summary

CVE-2023-2640 is a high (CVSS 7.8) Incorrect Authorization vulnerability in canonical ubuntu_linux. EPSS estimates a 15.20% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (Metasploit, 26-07-2023)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

15.20%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, metasploit

Advisory lineage

Upstream 0 · Downstream 7 · Related 9

USN-6248-1 USN-6260-1 USN-6285-1 USN-8255-1 USN-8275-1 USN-8297-1+3 more

Timeline

26-07-2023
PublishedVulnerability first disclosed.
23-10-2024
Last modifiedVulnerability information updated.

Description

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.

CVSS metrics

3 scores · 3 sources · 1 version

v3.17.8

EPSS trend

Probability

15.20%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 15.20% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (wiz.io)
Maturity: unknown
MetasploitremoteUnverified
GameOver(lay) Privilege Escalation and Container Escape
exploit/linux/local/gameoverlay_privesc
Maturity: poc

Weaknesses

CWE · root cause

CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu117 products

linuxAll versions (No fix recorded) | < 5.15.0-177.187
linux-awsAll versions (No fix recorded) | < 5.15.0-1106.113
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)
linux-aws-5.13All versions (No fix recorded)

linux-aws-5.15< 5.15.0-1106.113~20.04.1
linux-aws-5.19< 5.19.0-1029.30~22.04.1
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4All versions (No fix recorded)
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.14All versions (No fix recorded)
linux-aws-6.2< 6.2.0-1008.8~22.04.1
linux-aws-6.5All versions (No fix recorded)
linux-aws-fipsAll versions (No fix recorded) | < 5.15.0-1106.113+fips1
linux-aws-hweAll versions (No fix recorded)
linux-azureAll versions (No fix recorded) | < 5.15.0-1111.120
linux-azure-4.15All versions (No fix recorded)
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1111.120~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4All versions (No fix recorded)
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2< 6.2.0-1008.8~22.04.1
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fde< 5.15.0-1114.123
linux-azure-fipsAll versions (No fix recorded) | < 5.15.0-1111.120+fips1
linux-bluefieldAll versions (No fix recorded) | < 5.15.0-1090.92
linux-fipsAll versions (No fix recorded) | < 5.15.0-177.187+fips1
linux-gcpAll versions (No fix recorded) | < 5.15.0-1106.115
linux-gcp-4.15All versions (No fix recorded)
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1106.115~20.04.1
linux-gcp-5.19< 5.19.0-1030.32~22.04.1
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4All versions (No fix recorded)
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.14All versions (No fix recorded)
linux-gcp-6.2< 6.2.0-1010.10~22.04.1
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-fipsAll versions (No fix recorded) | < 5.15.0-1106.115+fips1
linux-gke< 5.15.0-1102.108
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.15.0-1089.97
linux-gkeop-5.15All versions (No fix recorded)
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-177.187~20.04.1
linux-hwe-5.19< 5.19.0-50.50
linux-hwe-5.4All versions (No fix recorded)
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.14All versions (No fix recorded)
linux-hwe-6.2< 6.2.0-26.26~22.04.1
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibmAll versions (No fix recorded) | < 5.15.0-1100.103
linux-ibm-5.15< 5.15.0-1100.103~20.04.1
linux-ibm-5.4All versions (No fix recorded)
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded) | < 5.15.0-1098.100
linux-intel-iotg< 5.15.0-1101.107
linux-intel-iotg-5.15< 5.15.0-1101.107~20.04.1
linux-iotAll versions (No fix recorded)
linux-kvmAll versions (No fix recorded) | < 5.15.0-1098.103
linux-lowlatency< 5.15.0-177.187
linux-lowlatency-hwe-5.15< 5.15.0-177.187~20.04.1
linux-lowlatency-hwe-5.19< 5.19.0-1030.30
linux-lowlatency-hwe-6.2< 6.2.0-1009.9~22.04.1
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-lts-xenialAll versions (No fix recorded)
linux-nvidia< 5.15.0-1101.102
linux-nvidia-6.2< 6.2.0-1009.9
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-tegra< 5.15.0-1058.58
linux-nvidia-tegra-5.15< 5.15.0-1058.58~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1047.47
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0< 6.0.0-1020.20
linux-oem-6.1< 6.1.0-1019.19
linux-oem-6.14All versions (No fix recorded)
linux-oem-6.5All versions (No fix recorded)
linux-oracleAll versions (No fix recorded) | < 5.15.0-1103.109
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1104.110~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4All versions (No fix recorded)
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.14All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-raspiAll versions (No fix recorded) | < 5.15.0-1100.103
linux-raspi-5.4All versions (No fix recorded)
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1105.114
linux-realtime-6.14All versions (No fix recorded)
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1100.104~20.04.1
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx-zynqmpAll versions (No fix recorded) | < 5.15.0-1070.74

Show all 117

Canonical1 product

ubuntu_linuxEOL23.04

2 vendors · 118 products

References

15 links

ubuntu.com/security/notices/USN-6250-1Vendor AdvisoryAdvisory
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2640Issue TrackingThird Party Advisory
wiz.io/blog/ubuntu-overlayfs-vulnerabilityTechnical DescriptionREPORTExploitMitigationThird Party Advisory
lists.ubuntu.com/archives/kernel-team/2023-July/140923.htmlMailing ListREPORTPatch
ubuntu.com/security/CVE-2023-2640REPORT
ubuntu.com/security/notices/USN-6248-1Advisory
ubuntu.com/security/notices/USN-6260-1Advisory
ubuntu.com/security/notices/USN-6285-1Advisory
www.cve.org/CVERecord?id=CVE-2023-2640REPORT
ubuntu.com/security/notices/USN-8255-1Advisory

Show all 15 references

ubuntu.com/security/notices/USN-8255-2Advisory
ubuntu.com/security/notices/USN-8255-3Advisory
ubuntu.com/security/notices/USN-8275-1Advisory
ubuntu.com/security/notices/USN-8297-1Advisory
ubuntu.com/security/notices/USN-8439-1Advisory