In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade perfUpgrade kernel-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64kUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-64kUpgrade kernel-64k-modules | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.236-227.928Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernelUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-devel | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade rvUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-headers | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-azure | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1036-raspi | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub