CVE-2023-2640

7.8 highEPSS 15%

High (7.8) in canonical ubuntu linux. EPSS 15% chance of exploitation in the next 30 days.

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2640
https://lists.ubuntu.com/archives/kernel-team/2023-July/140923.html
https://ubuntu.com/security/notices/USN-6250-1
https://wiz.io/blog/ubuntu-overlayfs-vulnerability
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2640

Check your stack JSON