CVE-2024-56570: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.

Affected products

• Linux Linux Kernel: before 5.4.287 (fixed in 5.4.287); from 5.5, before 5.10.231 (fixed in 5.10.231); from 5.11, before 5.15.174 (fixed in 5.15.174); from 5.16, before 6.1.120 (fixed in 6.1.120); from 6.2, before 6.6.64 (fixed in 6.6.64); from 6.7, before 6.12.4 (fixed in 6.12.4)

Published 2024-12-27. Last modified 2026-06-17.