GameOver(lay) - Local Privilege Escalation in Ubuntu Kernel
projectdiscovery.io | vulnerability | #bug-bounty
Summary
GameOver(lay) encompasses two significant vulnerabilities within the Ubuntu kernel, CVE-2023-2640, and CVE-2023-32629, each carrying a high-severity rating with CVSS scores of 7.8. These vulnerabilities pose a critical threat, potentially affecting around 40% of Ubuntu users. The vulnerability lies within the OverlayFS module of the Ubuntu kernel, enabling a local attacker to execute a privilege escalation attack, granting unauthorized elevated access to the system. Technical Details CVE-2023
- Published
- Collected
--- id: 9304 title: "GameOver(lay) - Local Privilege Escalation in Ubuntu Kernel" source_domain: projectdiscovery.io source_url: "https://projectdiscovery.io/blog/gameover-lay-local-privilege-escalation-in-ubuntu-kernel" published_at: "2023-11-13T19:30:49Z" tags: ["bug-bounty"] phying_url: "https://phying.com/item/9304" lang: en --- # GameOver(lay) - Local Privilege Escalation in Ubuntu Kernel ## Summary GameOver(lay) encompasses two significant vulnerabilities within the Ubuntu kernel, CVE-2023-2640, and CVE-2023-32629, each carrying a high-severity rating with CVSS scores of 7.8. These vulnerabilities pose a critical threat, potentially affecting around 40% of Ubuntu users. The vulnerability lies within the OverlayFS module of the Ubuntu kernel, enabling a local attacker to execute a privilege escalation attack, granting unauthorized elevated access to the system. Technical Details CVE-2023 ## Intelligence Metadata - **Sources:** projectdiscovery.io - **Published:** 2023-11-13T19:30:49Z - **Original:** https://projectdiscovery.io/blog/gameover-lay-local-privilege-escalation-in-ubuntu-kernel - **Phying News:** https://phying.com/item/9304