CVE-2023-32629

CVSS 3.1: 7.8 high
EPSS: 9%p95
Published: Jul 26, 2023 · Jul 26, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-32629 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

Vendors: canonical

Products: ubuntu linux

Weakness: CWE-863

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news

5 stories

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

The Hacker NewsJun 18, 14:06 UTC · Jun 18, 2025VulnerabilityExploitedCVE-2023-0386 CVE-2023-32629 CVE-2023-26402

Description · NVD

In the news

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

40% of Ubuntu Cloud Workloads Vulnerable to Exploits

GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

Vulnerabilities could expose Ubuntu users to privilege escalation attacks

Two flaws in Linux Ubuntu affect 40% of Ubuntu users