In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64kUpgrade kernel-docUpgrade rvUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-develUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-livepatch-5.15.179-121.185Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-modules-extra | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-armUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-rtUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-cavium | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-24.04 | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub