In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/065bf5dd21639f80e68450de16bda829784dbb8c cve-icon cve-icon
https://git.kernel.org/stable/c/5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3 cve-icon cve-icon
https://git.kernel.org/stable/c/72014e7745cc8250bb8f27bd78694dfd3f1b5773 cve-icon cve-icon
https://git.kernel.org/stable/c/749eac5a6687ec99116e0691d0d71225254654e3 cve-icon cve-icon
https://git.kernel.org/stable/c/c8b359dddb418c60df1a69beea01d1b3322bfe83 cve-icon cve-icon
https://git.kernel.org/stable/c/f9248e2f73fb4afe08324485e98c815ac084d166 cve-icon cve-icon
https://git.kernel.org/stable/c/ff43d008bbf9b27ada434d6455f039a5ef6cee53 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024122716-CVE-2024-56570-7580@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-56570 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-56570 cve-icon
History

Tue, 04 Mar 2025 15:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Thu, 09 Jan 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 27 Dec 2024 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.
Title ovl: Filter invalid inodes with missing lookup function
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-12-27T14:23:13.273Z

Updated: 2025-05-04T09:58:36.937Z

Reserved: 2024-12-27T14:03:05.997Z

Link: CVE-2024-56570

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2024-12-27T15:15:15.963

Modified: 2024-12-27T15:15:15.963

Link: CVE-2024-56570

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-12-27T00:00:00Z

Links: CVE-2024-56570 - Bugzilla