In the Linux kernel, the following vulnerability has been resolved:
ovl: fix warning in ovl_create_real()
Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():
if (!err && WARN_ON(!newdentry->d_inode)) {
The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.
Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-modules | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64 | Aug 22, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-ibmUpgrade linux-azure-fde-5.15Upgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-hwe-5.4 | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub