In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modulesUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-develUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-64k-coreUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extra | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-devel | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.130-139.222Upgrade kernelUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-tools | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade rvUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade rtlaUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-devel | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade dlm-kmp-64kb | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-virtualUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-79-genericUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-79-lowlatency-64k | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub