In the Linux kernel, the following vulnerability has been resolved:
ovl: fix warning in ovl_create_real()
Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():
if (!err && WARN_ON(!newdentry->d_inode)) {
The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.
Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headers | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-headers | Aug 22, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-raspiUpgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-gcp-5.4 | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub