CVE-2026-53174

kernel: ovl: keep err zero after successful ovl_cache_get()

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's overlay filesystem (ovl) component. Specifically, an issue in the ovl_iterate_merged() function incorrectly stores an error pointer even after a successful cache operation. This can lead to the function returning a misleading non-zero error, potentially causing unexpected behavior or instability within the system. This vulnerability is related to incorrect error handling during directory iteration.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-253 · Incorrect Check of Function Return Value