Canonical Ubuntu OverlayFS File System Missing Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

GameOver(lay): Easy-to-exploit local privilege escalation vulnerabilities in Ubuntu Linux affect 40% of Ubuntu cloud workloads

Wiz Research discovered CVE-2023-2640 and CVE-2023-32629, two easy-to-exploit privilege escalation vulnerabilities in the OverlayFS module in Ubuntu affecting 40% of Ubuntu cloud workloads...

GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

Cybersecurity researchers have disclosed two high-severity security flaws in the Ubuntu kernel that could pave the way for local privilege escalation attacks. Cloud security firm Wiz, in a report shared with The Hacker News, said the easy-to-exploit shortcomings have the potential to impact 40% o...

USN-6260-1: Linux kernel vulnerabilities

It was discovered that the NTFS file system implementation in the Linux kernel did not properly check buffer indexes in certain situations, leading to an out-of-bounds read vulnerability. A local attacker could possibly use this to expose sensitive information kernel memory. CVE-2022-48502...

Ubuntu: Security Advisory (USN-6251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6260-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6260-1 advisory. It was discovered that the NTFS file system implementation in the Linux kernel did not properly check buffer indexes in certain situations, leading to an...

SUSE CVE-2023-32629

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...

CVE-2023-32629

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...

CVE-2023-32629

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...

CVE-2023-32629

CVE-2023-32629 is an OverlayFS local privilege escalation in Ubuntu kernels. The issue arises when OverlayFS copy-up uses host credentials while preserving xattrs, allowing an unprivileged user (with user namespaces) to gain real root outside the namespace by exploiting a trusted cap_setuid xattr...

CVE-2023-32629

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...

CVE-2023-32629

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...

CVE-2023-2640

The OverlayFS module in the Ubuntu kernel is vulnerable to local privilege escalation. Specifically, in kernels carrying both c914c0e27eb0 and the "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs" * patch, unprivileged users can set privileged extended attributes ...

Canonical Ubuntu Linux 安全漏洞

Canonical Ubuntu Linux is a Linux operating system from Canonical, a British company. Canonical Ubuntu Linux suffers from a security vulnerability that stems from OverlayFS in the kernel not performing privilege checks, resulting in an elevation of privilege vulnerability...

Critical Photon OS Security Update - PHSA-2023-3.0-0618

Updates of 'fuse-overlayfs-snapshotter' packages of Photon OS have been released...

CVE-2023-32629: Incorrect Authorization

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...

Canonical Ubuntu 安全漏洞

Canonical Ubuntu is a GNU/Linux operating system for desktop applications from Canonical, a British company. A security vulnerability exists in Canonical Ubuntu that stems from Overlayfs ovlcopyupmetainodedata skipping privilege checking when ovldosetxattr is called on the Ubuntu kernel...

CVE-2023-2640: Incorrect Authorization

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6248-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6248-1 advisory. It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local...

USN-6250-1: Linux kernel vulnerabilities

Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. CVE-2023-2640 It was discovered that the IP-VLAN...