In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64kUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debugUpgrade kernel-rt-64k-develUpgrade kernel-64k-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade perfUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-kvmUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade rvUpgrade kernel-uki-virt | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfo | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade libperfUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvm | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-64kb-devel | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-genericUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-azure-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-intelUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1015-azure | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub