{"uuid": "e0c28c73-7864-48c9-810e-dd43df3b47b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32629", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/gameoverlay_privesc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"aarch64, x64, cmd\", \"author\": [\"g1vi\", \"h00die\", \"bwatters-r7\", \"gardnerapp\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits the use of unsafe functions in a number of Ubuntu kernels\\n          utilizing vulnerable versions of overlayfs. To mitigate CVE-2021-3493 the Linux\\n          kernel added a call to vfs_setxattr during ovl_do_setxattr. Due to independent\\n          changes to the kernel by the Ubuntu development team __vfs_setxattr_noperm is\\n          called during ovl_do_setxattr without calling the intermediate safety function\\n          vfs_setxattr. Ultimatly this module allows for root access to be achieved by\\n          writing setuid capabilities to a file which are not sanitized after being unioned\\n          with the upper mounted directory.\", \"disclosure_date\": \"2023-07-26\", \"fullname\": \"exploit/linux/local/gameoverlay_privesc\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"GameOver(lay) Privilege Escalation and Container Escape\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/gameoverlay_privesc.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"linux/local/gameoverlay_privesc\", \"references\": [\"URL-https://www.crowdstrike.com/blog/crowdstrike-discovers-new-container-exploit/\", \"URL-https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629\", \"URL-https://www.cvedetails.com/cve/CVE-2023-2640/\", \"URL-https://www.cvedetails.com/cve/CVE-2023-32629/\", \"URL-https://www.wiz.io/blog/ubuntu-overlayfs-vulnerability\", \"CVE-2023-32629\", \"CVE-2023-2640\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Linux_Binary\", \"Linux_Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:08.140079Z"}