ID:10993 - Exploit for Permissions, Privileges, and Access Controls in linux-image-6.2.0-1006-ibm (Ubuntu package) - CVE-2023-2640

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to missing permission checks for trusted.overlayfs.* xattrs". A local user can set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.

Remediation