In the Linux kernel, the following vulnerability has been resolved:
ovl: fix warning in ovl_create_real()
Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():
if (!err && WARN_ON(!newdentry->d_inode)) {
The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.
Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-zfcpdump | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.93-87.444Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade perf | Aug 22, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-hwe-5.4 | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub