CVE-2024-27069

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27069
In the Linux kernel, the following vulnerability has been resolved: ovl: relax WARN_ON in ovl_verify_area() syzbot hit an assertion in copy up data loop which looks like it is the result of a lower file whose size is being changed underneath overlayfs. This type of use case is documented to cause undefined behavior, so returning EIO error for the copy up makes sense, but it should not be causing a WARN_ON assertion.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e Patch
https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca Patch
https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e Patch
https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Sep 2025, 16:52

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e - () https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e - Patch
References () https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca - () https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca - Patch

21 Nov 2024, 09:03

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e - () https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e -
References () https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca - () https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: ovl: relax WARN_ON en ovl_verify_area() syzbot alcanzó una afirmación en el bucle de copia de datos que parece ser el resultado de un archivo inferior cuyo tamaño se está cambiando debajo de overlayfs. Está documentado que este tipo de caso de uso causa un comportamiento indefinido, por lo que devolver un error EIO para la copia tiene sentido, pero no debería causar una afirmación WARN_ON.

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2025-09-18 16:52

NVD link : CVE-2024-27069

Mitre link : CVE-2024-27069

CVE.ORG link : CVE-2024-27069

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo