In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade rtlaUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-coreUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-develUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-rt-64k-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64kUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvm | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.236-227.928 | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-libbpf-static | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade libperfUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade dtb-apm | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-fipsUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-awsUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-azureUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-20.04 | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub