In the Linux kernel, the following vulnerability has been resolved:
ovl: fix warning in ovl_create_real()
Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():
if (!err && WARN_ON(!newdentry->d_inode)) {
The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.
Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade perfUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-core | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64 | Aug 22, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linuxUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-oracle-5.4Upgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-kvm | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub