Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-32629

kernel: overlayfs: In Ubuntu skip permission checking for trusted.overlayfs.* xattrs

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels

CVSS 3.1 · 7.8 High EPSS 8.3% KEV · Not listed
Vendors
Canonical
Products
Ubantu Kernel Ubuntu Linux
CVE-2023-2640

kernel: overlayfs: In Ubuntu skip permission checking for trusted.overlayfs.* xattrs

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.

CVSS 3.1 · 7.8 High EPSS 15.2% KEV · Not listed
Vendors
Canonical
Products
Ubantu Kernel Ubuntu Linux