CVE-2021-47579

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47579
In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovl_create_real() Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real(): if (!err && WARN_ON(!newdentry->d_inode)) { The reason is that the cgroup2 filesystem returns from mkdir without instantiating the new dentry. Weird filesystems such as this will be rejected by overlayfs at a later stage during setup, but to prevent such a warning, call ovl_mkdir_real() directly from ovl_workdir_create() and reject this case early.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c Patch
https://git.kernel.org/stable/c/445d2dc63e5871d218f21b8f62ab29ac72f2e6b8 Patch
https://git.kernel.org/stable/c/6859985a2fbda5d1586bf44538853e1be69e85f7 Patch
https://git.kernel.org/stable/c/d2ccdd4e4efab06178608a34d7bfb20a54104c02 Patch
https://git.kernel.org/stable/c/f9f300a92297be8250547347fd52216ef0177ae0 Patch
https://git.kernel.org/stable/c/1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c Patch
https://git.kernel.org/stable/c/445d2dc63e5871d218f21b8f62ab29ac72f2e6b8 Patch
https://git.kernel.org/stable/c/6859985a2fbda5d1586bf44538853e1be69e85f7 Patch
https://git.kernel.org/stable/c/d2ccdd4e4efab06178608a34d7bfb20a54104c02 Patch
https://git.kernel.org/stable/c/f9f300a92297be8250547347fd52216ef0177ae0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

29 Sep 2025, 17:15

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c - () https://git.kernel.org/stable/c/1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c - Patch
References () https://git.kernel.org/stable/c/445d2dc63e5871d218f21b8f62ab29ac72f2e6b8 - () https://git.kernel.org/stable/c/445d2dc63e5871d218f21b8f62ab29ac72f2e6b8 - Patch
References () https://git.kernel.org/stable/c/6859985a2fbda5d1586bf44538853e1be69e85f7 - () https://git.kernel.org/stable/c/6859985a2fbda5d1586bf44538853e1be69e85f7 - Patch
References () https://git.kernel.org/stable/c/d2ccdd4e4efab06178608a34d7bfb20a54104c02 - () https://git.kernel.org/stable/c/d2ccdd4e4efab06178608a34d7bfb20a54104c02 - Patch
References () https://git.kernel.org/stable/c/f9f300a92297be8250547347fd52216ef0177ae0 - () https://git.kernel.org/stable/c/f9f300a92297be8250547347fd52216ef0177ae0 - Patch
First Time Linux linux Kernel
Linux

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c - () https://git.kernel.org/stable/c/1f5573cfe7a7056e80a92c7a037a3e69f3a13d1c -
References () https://git.kernel.org/stable/c/445d2dc63e5871d218f21b8f62ab29ac72f2e6b8 - () https://git.kernel.org/stable/c/445d2dc63e5871d218f21b8f62ab29ac72f2e6b8 -
References () https://git.kernel.org/stable/c/6859985a2fbda5d1586bf44538853e1be69e85f7 - () https://git.kernel.org/stable/c/6859985a2fbda5d1586bf44538853e1be69e85f7 -
References () https://git.kernel.org/stable/c/d2ccdd4e4efab06178608a34d7bfb20a54104c02 - () https://git.kernel.org/stable/c/d2ccdd4e4efab06178608a34d7bfb20a54104c02 -
References () https://git.kernel.org/stable/c/f9f300a92297be8250547347fd52216ef0177ae0 - () https://git.kernel.org/stable/c/f9f300a92297be8250547347fd52216ef0177ae0 -

20 Jun 2024, 12:43

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ovl: corregir advertencia en ovl_create_real() Syzbot activó la siguiente advertencia en ovl_workdir_create() -> ovl_create_real(): if (!err && WARN_ON(!newdentry->d_inode)) { La razón es que el sistema de archivos cgroup2 regresa desde mkdir sin crear una instancia del nuevo dentry. Los sistemas de archivos extraños como este serán rechazados por overlayfs en una etapa posterior durante la instalación, pero para evitar dicha advertencia, llame a ovl_mkdir_real() directamente desde ovl_workdir_create() y rechace este caso anticipadamente.

19 Jun 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-19 15:15

Updated : 2025-09-29 17:15

NVD link : CVE-2021-47579

Mitre link : CVE-2021-47579

CVE.ORG link : CVE-2021-47579

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo