CVE-2023-32629

PoC —

CVSS 3.1

7.8 high

EPSS

10%p95

Published

Jul 26, 2023 (Jul 26, 2023)

Modified

Jun 17, 2026

Description

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

Vendors: canonical
Products: ubuntu linux
Weakness: CWE-863
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.4%)

In the news5 stories

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

The Hacker NewsJun 18, 14:06 UTC · Jun 18, 2025Vulnerability in the wildCVE-2023-0386 CVE-2023-32629 CVE-2023-2640

CVE-2023-32629

In the news5 stories

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

40% of Ubuntu Cloud Workloads Vulnerable to Exploits

GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

Vulnerabilities could expose Ubuntu users to privilege escalation attacks

Two flaws in Linux Ubuntu affect 40% of Ubuntu users