SB20240610101 - Memory leak in Linux kernel overlayfs
Published: June 10, 2024 Updated: May 13, 2025
Security Bulletin ID
SB20240610101
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2021-46972)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the ovl_lookup() function in fs/overlayfs/namei.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/71d58457a8afc650da5d3292a7f7029317654d95
- https://git.kernel.org/stable/c/cf3e3330bc5719fa9d658e3e2f596bde89344a94
- https://git.kernel.org/stable/c/d587cfaef72b1b6f4b2774827123bce91f497cc8
- https://git.kernel.org/stable/c/eaab1d45cdb4bb0c846bd23c3d666d5b90af7b41
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.19
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.2
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13