CVE-2023-32629: canonical ubuntu_linux Incorrect Authorization

Modified

AliasesUBUNTU-CVE-2023-32629

Published 26-07-2023Last modified 13-02-2025

Vulnerability summary

CVE-2023-32629 is a high (CVSS 7.8) Incorrect Authorization vulnerability in canonical ubuntu_linux. EPSS estimates a 8.35% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (Metasploit, 26-07-2023)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

8.35%

0%100%

Low · -0.71 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, metasploit

Advisory lineage

Upstream 0 · Downstream 10 · Related 11

LSN-0097-1 USN-6248-1 USN-6251-1 USN-6260-1 USN-6261-1 USN-6285-1+6 more

Timeline

26-07-2023
PublishedVulnerability first disclosed.
13-02-2025
Last modifiedVulnerability information updated.

Description

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

CVSS metrics

3 scores · 3 sources · 1 version

v3.17.8

EPSS trend

Probability

8.35%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

Decrease -0.71 pp

From 9.05% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (wiz.io)
Maturity: unknown
MetasploitremoteUnverified
GameOver(lay) Privilege Escalation and Container Escape
exploit/linux/local/gameoverlay_privesc
Maturity: poc

Weaknesses

CWE · root cause

CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu109 products

linux< 5.4.0-155.172 | < 5.15.0-177.187
linux-aws< 5.4.0-1106.114 | < 5.15.0-1106.113
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)
linux-aws-5.13All versions (No fix recorded)

linux-aws-5.15< 5.15.0-1106.113~20.04.1
linux-aws-5.19< 5.19.0-1029.30~22.04.1
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1106.114~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2< 6.2.0-1008.8~22.04.1
linux-aws-6.5All versions (No fix recorded)
linux-aws-fips< 5.4.0-1106.114+fips1 | All versions (No fix recorded) | < 5.15.0-1106.113+fips1
linux-azureAll versions (No fix recorded) | < 5.4.0-1112.118 | < 5.15.0-1111.120
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1111.120~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1112.118~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2< 6.2.0-1008.8~22.04.1
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fde< 5.15.0-1114.123
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fips< 5.4.0-1112.118+fips1 | All versions (No fix recorded) | < 5.15.0-1111.120+fips1
linux-bluefield< 5.4.0-1068.74 | < 5.15.0-1090.92
linux-fips< 5.4.0-1081.90 | All versions (No fix recorded) | < 5.15.0-177.187+fips1
linux-gcpAll versions (No fix recorded) | < 5.4.0-1109.118 | < 5.15.0-1106.115
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1106.115~20.04.1
linux-gcp-5.19< 5.19.0-1030.32~22.04.1
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1109.118~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2< 6.2.0-1010.10~22.04.1
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-fips< 5.4.0-1109.118+fips1 | All versions (No fix recorded) | < 5.15.0-1106.115+fips1
linux-gke< 5.4.0-1104.111 | < 5.15.0-1102.108
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.4.0-1073.77 | < 5.15.0-1089.97
linux-gkeop-5.15All versions (No fix recorded)
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-177.187~20.04.1
linux-hwe-5.19< 5.19.0-50.50
linux-hwe-5.4< 5.4.0-155.172~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2< 6.2.0-26.26~22.04.1
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1053.58 | < 5.15.0-1100.103
linux-ibm-5.15< 5.15.0-1100.103~20.04.1
linux-ibm-5.4< 5.4.0-1053.58~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded) | < 5.15.0-1098.100
linux-intel-iotg< 5.15.0-1101.107
linux-intel-iotg-5.15< 5.15.0-1101.107~20.04.1
linux-iot< 5.4.0-1018.19
linux-kvm< 5.4.0-1095.101 | < 5.15.0-1098.103
linux-lowlatency< 5.15.0-177.187
linux-lowlatency-hwe-5.15< 5.15.0-177.187~20.04.1
linux-lowlatency-hwe-5.19< 5.19.0-1030.30
linux-lowlatency-hwe-6.2< 6.2.0-1009.9~22.04.1
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-nvidia< 5.15.0-1101.102
linux-nvidia-6.2< 6.2.0-1009.9
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-tegra< 5.15.0-1058.58
linux-nvidia-tegra-5.15< 5.15.0-1058.58~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1047.47
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0< 6.0.0-1020.20
linux-oem-6.1< 6.1.0-1019.19
linux-oem-6.5All versions (No fix recorded)
linux-oracle< 5.4.0-1105.114 | < 5.15.0-1103.109
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1104.110~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1105.114~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-raspi< 5.4.0-1090.101 | < 5.15.0-1100.103
linux-raspi-5.4< 5.4.0-1090.101~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1105.114
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1100.104~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx-zynqmp< 5.4.0-1026.30 | < 5.15.0-1070.74

Show all 109

Canonical1 product

ubuntu_linuxEOL23.04

2 vendors · 110 products

References

18 links

ubuntu.com/security/notices/USN-6250-1Vendor AdvisoryAdvisory
lists.ubuntu.com/archives/kernel-team/2023-July/140920.htmlMailing ListREPORTPatch
wiz.io/blog/ubuntu-overlayfs-vulnerabilityTechnical DescriptionREPORTExploit
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629Issue TrackingThird Party Advisory
packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html
ubuntu.com/security/CVE-2023-32629REPORT
ubuntu.com/security/notices/USN-6248-1Advisory
ubuntu.com/security/notices/USN-6251-1Advisory
ubuntu.com/security/notices/USN-6260-1Advisory
ubuntu.com/security/notices/USN-6261-1Advisory

Show all 18 references

ubuntu.com/security/notices/USN-6285-1Advisory
www.cve.org/CVERecord?id=CVE-2023-32629REPORT
ubuntu.com/security/notices/USN-8255-1Advisory
ubuntu.com/security/notices/USN-8255-2Advisory
ubuntu.com/security/notices/USN-8255-3Advisory
ubuntu.com/security/notices/USN-8275-1Advisory
ubuntu.com/security/notices/USN-8297-1Advisory
ubuntu.com/security/notices/USN-8439-1Advisory