Riskcovery

CVE-2021-47579

ovl: fix warning in ovl_create_real()

State
Published
Severity
Not scored
Published
Jun 19, 2024
Updated
May 11, 2026
Reserved
May 24, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ovl: fix warning in ovl_create_real()

Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():

if (!err && WARN_ON(!newdentry->d_inode)) {

The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.

Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before 445d2dc63e5871d218f21b8f62ab29ac72f2e6b8Affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before f9f300a92297be8250547347fd52216ef0177ae0Affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before 6859985a2fbda5d1586bf44538853e1be69e85f7Affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before d2ccdd4e4efab06178608a34d7bfb20a54104c02Affected
  • e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c to before 1f5573cfe7a7056e80a92c7a037a3e69f3a13d1cAffected
LinuxLinux
  • 3.18Affected
  • before 3.18Not affected
  • 4.19.222 through 4.19.*Not affected
  • 5.4.168 through 5.4.*Not affected
  • 5.10.88 through 5.10.*Not affected
  • 5.15.11 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.