In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64kUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-rtUpgrade kernel-rt-64kUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade rv | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.236-227.928Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.130-139.222 | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-rt-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade rtlaUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernelUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-core | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-fipsUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-azure-fdeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-raspi-realtime | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub