Description

A flaw was found in the OverlayFS (ovl) component of the Linux kernel. A local user can trigger a null pointer dereference by performing a specific sequence of file system operations. This vulnerability occurs when the ovl_get_acl_rcu() function attempts to access a real inode that has been set to NULL due to a race condition during inode destruction. Successful exploitation leads to a kernel crash, causing a Denial of Service (DoS).

Mitigation

Aliases