cbcvebase.
CVE-2021-47579
published 2024-06-19

CVE-2021-47579: In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovl_create_real() Syzbot triggered the following warning in…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.5th percentile
In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovl_create_real() Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real(): if (!err && WARN_ON(!newdentry->d_inode)) { The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry. Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.15.15-1 (bookworm)linux 5.15.15-1 (bookworm)
linuxlinux——
linuxlinux>= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c < 445d2dc63e5871d218f21b8f62ab29ac72f2e6b8445d2dc63e5871d218f21b8f62ab29ac72f2e6b8
linuxlinux>= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c < f9f300a92297be8250547347fd52216ef0177ae0f9f300a92297be8250547347fd52216ef0177ae0
linuxlinux>= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c < 6859985a2fbda5d1586bf44538853e1be69e85f76859985a2fbda5d1586bf44538853e1be69e85f7
linuxlinux>= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c < d2ccdd4e4efab06178608a34d7bfb20a54104c02d2ccdd4e4efab06178608a34d7bfb20a54104c02
linuxlinux>= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c < 1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c
linuxlinux_kernel< 4.19.2224.19.222
linuxlinux_kernel>= 0 < 5.10.92-15.10.92-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 4.20 < 5.4.1685.4.168
linuxlinux_kernel>= 5.11 < 5.15.115.15.11
linuxlinux_kernel>= 5.5 < 5.10.885.10.88

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.