⬇ Download holy card: ·
Saint GameOver(lay), Who Overlaid the Privileges
Patron of Ubuntu kernels, OverlayFS, and those who stack filesystems without looking at what drips underneath.
Life
In July 2023 Wiz researchers revealed GameOver(lay) (CVE-2023-2640 and CVE-2023-32629), two flaws in the OverlayFS module of Ubuntu kernels. OverlayFS stacks several filesystems on top of one another, but here the extended attributes of files, capabilities included, could be carried upward without the proper checks, letting an ordinary user gain root privileges with a few commands.
Prayer
O Saint GameOver(lay), who raises privileges by stacking filesystems, teach our overlays to check what they carry to the top. Amen.
How to celebrate
Celebrated by updating the Ubuntu kernel and distrusting attributes that climb from below without permission.
Stack the filesystem, give the privilege away.