fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debug | Jul 1, 2017 | Aug 6, 2016 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 6, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Dec 18, 2019 | Aug 6, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 6, 2016 | Jul 11, 2016 |
| Redhat_linux | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-kdump-develUpgrade kernel-debuginfoUpgrade kernel-rt-trace-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-trace-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-docUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-docUpgrade kernel-debuginfo-common-s390xUpgrade kernel-kdumpUpgrade perfUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-rt-traceUpgrade kernel-bootwrapper | Nov 3, 2016 | Aug 6, 2016 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-build | Dec 9, 2016 | Aug 6, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-36-powerpc-smpUpgrade linux-image-4.4.0-36-lowlatencyUpgrade linux-image-4.4.0-36-powerpc64-embUpgrade linux-image-4.4.0-1021-raspi2Upgrade linux-image-4.4.0-1024-snapdragonUpgrade linux-image-4.4.0-36-generic-lpaeUpgrade linux-image-4.4.0-36-powerpc64-smpUpgrade linux-image-4.4.0-36-genericUpgrade linux-image-4.4.0-36-powerpc-e500mc | Aug 29, 2016 | Aug 6, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub