Description
A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 ("ovl: fix use after free in struct ovl_aio_req") not applied yet, the kernel could be affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Kernel | Linux kernel 5.16-rc1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.15.3-3 | — |
| Debian 13 | linux | 5.15.3-3 | — |
| Debian 12 | linux | 5.15.3-3 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux-riscv | No fix yet | — |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1013.13 | — |
| Ubuntu 20.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.2.0-362.8.1.el9_3 | RHSA-2023:6583 |
| RHEL 9 | rv +64 | 5.14.0-362.8.1.el9_3 | RHSA-2023:6583 |
| RHEL 8 | kernel-rt +12 | 4.18.0-513.5.1.rt7.307.el8_9 | RHSA-2023:6901 |
| RHEL 8 | perf +26 | 4.18.0-513.5.1.el8_9 | RHSA-2023:7077 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Hypervisor 4 | perf +2 | 4.18.0-372.91.1.el8_6 | RHSA-2024:0724 |
| RHEL 9.2 EUS | bpftool | 7.0.0-284.90.1.el9_2 | RHSA-2024:8613 |
| RHEL 9.2 EUS | kernel-rt +14 | 5.14.0-284.90.1.rt14.375.el9_2 | RHSA-2024:8614 |
| RHEL 9.2 EUS | perf +48 | 5.14.0-284.90.1.el9_2 | RHSA-2024:8613 |
| RHEL 8.8 EUS | perf +26 | 4.18.0-477.75.1.el8_8 | RHSA-2024:8107 |
| RHEL 8.6 EUS | perf +26 | 4.18.0-372.91.1.el8_6 | RHSA-2024:0724 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | perf +24 | 4.18.0-513.5.1.el8_9 | ALSA-2023:7077 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.107.1-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.2.0-362.8.1.el9_3 | ELSA-2023-6583 |
| Oracle Linux 9 | rv +25 | 5.14.0-362.8.1.el9_3 | ELSA-2023-6583 |
| Oracle Linux 8 | perf +19 | 4.18.0-513.5.1.el8_9 | ELSA-2023-7077 |
Advisories 12
- ALSA-2023:7077 Important: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:8613 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8614 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8107 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2023:7077 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2023:6583 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0724 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2023:6901 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- WID-SEC-2024-1086 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 19, 2025
- WID-SEC-2023-0584 Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Oct 29, 2024
- ELSA-2023-7077 Important: kernel security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 17, 2023
- ELSA-2023-6583 Important: kernel security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 12, 2023