Vulnerability Details : CVE-2024-27069
In the Linux kernel, the following vulnerability has been resolved:
ovl: relax WARN_ON in ovl_verify_area()
syzbot hit an assertion in copy up data loop which looks like it is
the result of a lower file whose size is being changed underneath
overlayfs.
This type of use case is documented to cause undefined behavior, so
returning EIO error for the copy up makes sense, but it should not be
causing a WARN_ON assertion.
Products affected by CVE-2024-27069
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2024-27069
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 23 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2024-27069
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
N/A
|
N/A
|
RedHat-CVE-2024-27069 | 2024-05-02 |
References for CVE-2024-27069
-
https://git.kernel.org/stable/c/77a28aa476873048024ad56daf8f4f17d58ee48e
ovl: relax WARN_ON in ovl_verify_area() - kernel/git/stable/linux.git - Linux kernel stable tree
-
https://git.kernel.org/stable/c/c3c85aefc0da1e5074a06c682542a54ccc99bdca
ovl: relax WARN_ON in ovl_verify_area() - kernel/git/stable/linux.git - Linux kernel stable tree
Jump to