In the Linux kernel, the following vulnerability has been resolved:
ovl: fix warning in ovl_create_real()
Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():
if (!err && WARN_ON(!newdentry->d_inode)) {
The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.
Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-tools | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-devel | Aug 22, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-azureUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-raspiUpgrade linux-azure-fde-5.15 | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub