CVE-2024-56570

In the Linux kernel, the following vulnerability has been resolved:

ovl: Filter invalid inodes with missing lookup function

Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.

This vulnerability is rated as Moderate rather than Important because exploitation requires local access with administrative privileges or the ability to create unprivileged user namespaces to mount an OverlayFS hierarchy. Under specific configurations, supplying lower directory entries that lack valid inode lookup operations can trigger internal kernel faults and cause a local denial of service. Standard enterprise deployments are not exposed remotely, and typical container environments run with restricted privileges that prevent mounting arbitrary lower filesystem layers.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.