CVE-2023-32629: High severity Canonical Ubuntu Linux vulnerability
Last updated 23 May 2026
Other sources
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.257-1Fixed in 6.1.170-3Fixed in 6.1.174-1Fixed in 6.12.86-1Fixed in 6.12.90-2Fixed in 7.0.10-1Fixed in 7.0.12-2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.257-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.170-3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.174-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.86-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.90-2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.0.10-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.0.12-2 - Configuration
To temporarily disable unprivileged user namespace creation run: sudo sysctl -w kernel.unprivileged_userns_clone=0. To disable across reboots, create a sysctl file: echo kernel.unprivileged_userns_clone=0 | sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf
Linux kernel kernel.unprivileged_userns_clone = 0
Event History
Frequently Asked Questions
What is CVE-2023-32629?
CVE-2023-32629 is a local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels.
How severe is CVE-2023-32629?
CVE-2023-32629 has a severity rating of 7.8, which is considered high.
Which software versions are affected by CVE-2023-32629?
Ubuntu Linux version 23.04, Ubuntu Linux version 5.4.0-155.172 to version 6.2.0-26.26, and various other Ubuntu kernel versions are affected by CVE-2023-32629.
How can I fix CVE-2023-32629?
To fix CVE-2023-32629, update your Ubuntu kernel to the appropriate fixed version provided by Ubuntu or apply the necessary patches.
Where can I find more information about CVE-2023-32629?
You can find more information about CVE-2023-32629 on the MITRE CVE website, the Ubuntu kernel team mailing list, and the Ubuntu security notices.