CVE-2023-2640

Description

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.

Reserved 2023-05-10 | Published 2023-07-26 | Updated 2024-10-23 | Assigner canonical

Problem types

CWE-863

Product status

Default status
unaffected

Any version before 6.2.0-26.26
unaffected

Any version before 6.0.0-1020.20
unaffected

Any version before 5.4.0-155.172
unaffected

Credits

Stonejiajia finder

Shir Tamari finder

Sagi Tzadik finder

References

ubuntu.com/security/notices/USN-6250-1 vendor-advisory

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2640 issue-tracking

wiz.io/blog/ubuntu-overlayfs-vulnerability technical-description

lists.ubuntu.com/archives/kernel-team/2023-July/140923.html mailing-list

cve.org (CVE-2023-2640)

nvd.nist.gov (CVE-2023-2640)

Download JSON