In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-64k-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-coreUpgrade python3-perfUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64kUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matched | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.236-227.928Upgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-tools-debuginfo | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-debuginfo-common-x86_64 | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-debug-debuginfoUpgrade rtlaUpgrade kernel-coreUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extra | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt-optional | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-5.15.0-1081-oracle | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub