Main
Vulnerability Database
Exploits
ID:10994 - Exploit for Permissions, Privileges, and Access Controls in linux-image-6.2.0-1006-ibm (Ubuntu package) - CVE-2023-32629
ID:10994 - Exploit for Permissions, Privileges, and Access Controls in linux-image-6.2.0-1006-ibm (Ubuntu package) - CVE-2023-32629
Published: December 18, 2024
Vulnerability identifier: #VU78674
Vulnerability risk: Low
CVE-ID: CVE-2023-32629
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
linux-image-6.2.0-1006-ibm (Ubuntu package)
linux-image-6.2.0-1006-ibm (Ubuntu package)
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to ovl_copy_up_meta_inode_data skips permission checks when calling ovl_do_setxattr on Ubuntu kernels. A local user can execute arbitrary code with elevated privileges.
Remediation
Install updates from vendor's website.