CVE-2021-47579

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ovl: fix warning in ovl_create_real()

Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real():

if (!err && WARN_ON(!newdentry->d_inode)) {

The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry.

Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < 445d2dc63e5871d218f21b8f62ab29ac72f2e6b8; >= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < f9f300a92297be8250547347fd52216ef0177ae0; >= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < 6859985a2fbda5d1586bf44538853e1be69e85f7; >= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < d2ccdd4e4efab06178608a34d7bfb20a54104c02; >= e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, < 1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c
LinuxLinux3.18

References

Timeline

Published
Jun 19, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-475807.1In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix type in min_t to avoid stack OOB Change min_t() CVE-2021-475825.5In the Linux kernel, the following vulnerability has been resolved: USB: core: Make do_proc_control() and do_proc_bulk() killable The USBDCVE-2021-475835.5In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutex_init() location Syzbot reported, that mxCVE-2021-475845.5In the Linux kernel, the following vulnerability has been resolved: iocost: Fix divide-by-zero on donation from low hweight cgroup The donCVE-2021-475855.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in __add_inode_ref() Line 1169 (#3) allocates aCVE-2021-475865.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup KASAN reports an CVE-2021-475875.5In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descrCVE-2021-475885.5In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6_dev_free() from sit_init_net() ipip6_dev_free iCVE-2021-475897.8In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in `igbvf_probe` In `igbvf_probe`, if register_CVE-2021-475905.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in __mptcp_push_pending() __mptcp_push_pending() mCVE-2021-475915.5In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be CVE-2021-475925.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix tc flower deletion for VLAN priority Rx steering To r
CVE-2021-47579: Medium severity, CVSS 5.5 | Vulnix