CVE-2023-32629: High severity Canonical Ubuntu Linux vulnerability
Last updated 23 May 2026
Other sources
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Configuration
If unprivileged user namespaces are not needed, set kernel.unprivileged_userns_clone=0 to disable their creation; apply temporarily with `sudo sysctl -w kernel.unprivileged_userns_clone=0` and persist across reboots in `/etc/sysctl.d/99-disable-unpriv-userns.conf`.
Ubuntu kernel kernel.unprivileged_userns_clone = 0
Event History
Frequently Asked Questions
What is CVE-2023-32629?
CVE-2023-32629 is a local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels.
How severe is CVE-2023-32629?
CVE-2023-32629 has a severity rating of 7.8, which is considered high.
Which software versions are affected by CVE-2023-32629?
Ubuntu Linux version 23.04, Ubuntu Linux version 5.4.0-155.172 to version 6.2.0-26.26, and various other Ubuntu kernel versions are affected by CVE-2023-32629.
How can I fix CVE-2023-32629?
To fix CVE-2023-32629, update your Ubuntu kernel to the appropriate fixed version provided by Ubuntu or apply the necessary patches.
Where can I find more information about CVE-2023-32629?
You can find more information about CVE-2023-32629 on the MITRE CVE website, the Ubuntu kernel team mailing list, and the Ubuntu security notices.