In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debugUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-64kUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modulesUpgrade rtlaUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-modules-extra | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfo | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.130-139.222 | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-core | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dtb-freescale | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-azureUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-oem-22.04 | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub