In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, only introduced by the "datadir+" feature, but without actually handling this case, resulting in an Oops. Fix by disallowing datadir without lowerdir.
2025-05-09T07:16:07.317
2025-11-12T20:13:11.693
Analyzed
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | linux | linux_kernel | < 6.6.88 | Yes |
| Operating System | linux | linux_kernel | < 6.12.25 | Yes |
| Operating System | linux | linux_kernel | < 6.14.4 | Yes |
| Operating System | linux | linux_kernel | 6.15 | Yes |
| Operating System | linux | linux_kernel | 6.15 | Yes |