CVE-2023-32629

A flaw in Ubuntu's kernel allows a local user to gain higher system privileges by bypassing permission checks in the overlayfs feature. An attacker already logged into the system can exploit this to execute commands with administrator rights.

Local privilege escalation in overlayfs ovl_copy_up_meta_inode_data function that skips permission validation during ovl_do_setxattr calls. Attack vector requires local access; pre-condition is ability to interact with overlayfs mounts. Impact allows unprivileged users to escalate to root.