In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64kUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debugUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade rtlaUpgrade kernel-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-debug-devel | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.179-121.185Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfo | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade libperfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade rtlaUpgrade kernel-devel | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade dtb-amdUpgrade kernel-develUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-aws-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-intelUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-oem-20.04b | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub