References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e

https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca

In the Linux kernel, the following vulnerability has been resolved:

ovl: relax WARN_ON in ovl_verify_area()

syzbot hit an assertion in copy up data loop which looks like it is
the result of a lower file whose size is being changed underneath
overlayfs.

This type of use case is documented to cause undefined behavior, so
returning EIO error for the copy up makes sense, but it should not be
causing a WARN_ON assertion.

kernel.org https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e [No types assigned]

kernel.org https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca [No types assigned]