Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-56570

ovl: Filter invalid inodes with missing lookup function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to < f9248e2f73fb4afe08324485e98c815ac084d166affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to < 5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to < 749eac5a6687ec99116e0691d0d71225254654e3affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to < ff43d008bbf9b27ada434d6455f039a5ef6cee53affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to < 065bf5dd21639f80e68450de16bda829784dbb8caffected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to < 72014e7745cc8250bb8f27bd78694dfd3f1b5773affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to < c8b359dddb418c60df1a69beea01d1b3322bfe83affected

Linux Linux

Default version status: affected

  • 3.18affected
  • 0 to < 3.18unaffected
  • 5.4.287 to ≤ 5.4.*unaffected
  • 5.10.231 to ≤ 5.10.*unaffected
  • 5.15.174 to ≤ 5.15.*unaffected
  • 6.1.120 to ≤ 6.1.*unaffected
  • 6.6.64 to ≤ 6.6.*unaffected
  • 6.12.4 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References