In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-64kUpgrade kernel-rt-64k-debugUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-develUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-rt-64k-modulesUpgrade kernel-modules-coreUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-rt-64kUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-docUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-tools | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-5.10.236-227.928Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perf-debuginfo | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftool | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matched | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-renesas | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-kvmUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-aws-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04d | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub