CVE-2024-56570

Updated: 2025-11-19 04:37:05.521347

Description:

In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2025:1762171389 2025-11-03 18:15:19
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2025-11-01 21:00:31
CentOS 7 ELS kernel 3.10.0 7.8 HIGH In Testing 2025-10-17 05:29:00
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2025:1763731262 2025-11-21 21:36:01
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2025:1763734783 2025-11-21 21:36:02
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2025:1763722365 2025-11-21 21:35:58
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH Ignored 2025-11-07 23:09:57 CloudLinux 6 and 7 support is limited and provided on demand. We strongly recommend upgrading to Clo...
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2025-11-01 21:00:29
Oracle Linux 7 ELS kernel 3.10.0 7.8 HIGH Released 2025-12-18 20:41:16
Oracle Linux 7 ELS kernel-uek 5.4.17 7.8 HIGH Already Fixed 2026-02-03 16:49:10
Total: 14