In the Linux kernel, the following vulnerability has been resolved:
ovl: fix warning in ovl_create_real()
Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():
if (!err && WARN_ON(!newdentry->d_inode)) {
The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.
Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-kvm | Aug 12, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-5.10.93-87.444Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel | Aug 22, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-ibm-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-azure-fde-5.15Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-ibmUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-aws-fipsUpgrade linux-gkeop | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub