In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().
Move dput(upper) after its last use to prevent use-after-free.
BUG: KASAN: slab-use-after-free in ovl_dentry_remote fs/overlayfs/util.c:162 [inline] BUG: KASAN: slab-use-after-free in ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167
Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 ovl_dentry_remote fs/overlayfs/util.c:162 [inline] ovl_dentry_update_reval+0xd2/0xf0 fs/overlayfs/util.c:167 ovl_link_up fs/overlayfs/copy_up.c:610 [inline] ovl_copy_up_one+0x2105/0x3490 fs/overlayfs/copy_up.c:1170 ovl_copy_up_flags+0x18d/0x200 fs/overlayfs/copy_up.c:1223 ovl_rename+0x39e/0x18c0 fs/overlayfs/dir.c:1136 vfs_rename+0xf84/0x20a0 fs/namei.c:4893 ... </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64kUpgrade kernel-rtUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade perfUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-extra | Jul 14, 2025 | Mar 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.179-121.185Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfo | Apr 10, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-tools-debuginfo | Apr 15, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Mar 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-develUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-modules-core | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade dtb-socionextUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-source | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1033-gkeUpgrade linux-image-6.8.0-1037-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-1036-aws-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1036-nvidiaUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1036-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-6.8.0-1037-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-79-generic-64kUpgrade linux-image-6.8.0-1036-nvidia-64kUpgrade linux-image-6.8.0-79-lowlatencyUpgrade linux-image-6.8.0-1020-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.8.0-1036-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1036-awsUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1033-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-79-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.1-1031-realtimeUpgrade linux-image-6.8.0-2029-raspi-realtimeUpgrade linux-image-6.8.0-1033-oracle-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-6.8.0-79-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1036-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae | May 20, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub