CVE-2023-2640

PoC —1

CVSS 3.1

7.8 high

EPSS

15%p97

Published

Jul 26, 2023 (Jul 26, 2023)

Modified

Jun 17, 2026

Description

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.

Vendors: canonical
Products: ubuntu linux
Weakness: CWE-863
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.2%)

In the news7 stories

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

The Hacker NewsJun 18, 14:06 UTC · Jun 18, 2025Vulnerability in the wildCVE-2023-0386 CVE-2023-32629 CVE-2023-2640

CVE-2023-2640

In the news7 stories

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

Analyzing the vulnerability landscape in Q3 2024

Analyzing the vulnerability landscape in Q2 2024

40% of Ubuntu Cloud Workloads Vulnerable to Exploits

GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

Vulnerabilities could expose Ubuntu users to privilege escalation attacks

Two flaws in Linux Ubuntu affect 40% of Ubuntu users