High severity · published Dec 27, 2024
CVE-2024-56570
ovl: Filter invalid inodes with missing lookup function
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
ovl: Filter invalid inodes with missing lookup function
Add a check to the ovl_dentry_weird() function to prevent the
processing of directory inodes that lack the lookup function.
This is important because such inodes can cause errors in overlayfs
when passed to the lowerstack.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 5.4.287; 5.5 before 5.10.231; 5.11 before 5.15.174; 5.16 before 6.1.120; 6.2 before 6.6.64; 6.7 before 6.12.4 · source: NVD
LI
Linux · Linux
e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c before f9248e2f73fb4afe08324485e98c815ac084d166; e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c before 5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3; e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c before 749eac5a6687ec99116e0691d0d71225254654e3; e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c before ff43d008bbf9b27ada434d6455f039a5ef6cee53; e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c before 065bf5dd21639f80e68450de16bda829784dbb8c; e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c before 72014e7745cc8250bb8f27bd78694dfd3f1b5773; +2 more · source: vendor
RR
RUGGEDCOM RST2428P · Siemens
before V3.2 · source: CISA
SX
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · Siemens
before V3.2 · source: CISA
SX
SCALANCE XCM-/XRM-/XCH-/XRH-300 family · Siemens
before V3.2 · source: CISA
SS
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA
SS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA
SS
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-56570
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-56570
Patch
https://git.kernel.org/stable/c/065bf5dd21639f80e68450de16bda829784dbb8c
Patch
https://git.kernel.org/stable/c/5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3
Patch
https://git.kernel.org/stable/c/72014e7745cc8250bb8f27bd78694dfd3f1b5773
Patch
https://git.kernel.org/stable/c/749eac5a6687ec99116e0691d0d71225254654e3
Patch
https://git.kernel.org/stable/c/c8b359dddb418c60df1a69beea01d1b3322bfe83
Patch
https://git.kernel.org/stable/c/f9248e2f73fb4afe08324485e98c815ac084d166
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability