CVE-2021-47579

Advisory lineage Upstream: 0 Downstream: 5
Analyzed
Published: 19 Jun 2024, 14:53
Last modified:11 May 2026, 13:57

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.02% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Jun 2024, 14:53
Published
Vulnerability first disclosed
11 May 2026, 13:57
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovl_create_real() Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real(): if (!err && WARN_ON(!newdentry->d_inode)) { The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry. Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 4%

Affected Systems

  • linux•linux

    ≥ e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < 445d2dc63e5871d218f21b8f62ab29ac72f2e6b8 | ≥ e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < f9f300a92297be8250547347fd52216ef0177ae0 | ≥ e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < 6859985a2fbda5d1586bf44538853e1be69e85f7 | ≥ e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < d2ccdd4e4efab06178608a34d7bfb20a54104c02 | ≥ e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < 1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c | 3.18

  • linux•linux_kernel

    < 4.19.222 | ≥ 4.20, < 5.4.168 | ≥ 5.5, < 5.10.88 | ≥ 5.11, < 5.15.11

References (5)