CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects Ubuntu. Its EPSS score suggests a 16.1% probability of exploitation in the next 30 days.
CVE
CVE-2023-2640
Severity
HIGH
CVSS
7.8
EPSS
16.05%
Ubuntu
Original NVD Description
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)