Red Hat: CVE-2021-47579: kernel: ovl: fix warning in ovl_create_real() (Multiple Advisories)

Red Hat: CVE-2021-47579: kernel: ovl: fix warning in ovl_create_real() (Multiple Advisories)

Severity

4

CVSS

(AV:L/AC:H/Au:M/C:N/I:N/A:C)

Published

06/19/2024

Created

08/13/2024

Added

08/12/2024

Modified

08/12/2024

Description

In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovl_create_real() Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real(): if (!err && WARN_ON(!newdentry->d_inode)) { The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry. Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.

Solution(s)

• redhat-upgrade-kernel
• redhat-upgrade-kernel-rt

References

• CVE-2021-47579
• RHSA-2024:5101
• RHSA-2024:5102