In the Linux kernel, the following vulnerability has been resolved:
ovl: fix warning in ovl_create_real()
Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():
if (!err && WARN_ON(!newdentry->d_inode)) {
The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.
Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelists | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfo | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perfUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-azureUpgrade linux-ibm-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-5.4 | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub