fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.
[
{
"id": "CVE-2016-6197-0b5f43b3",
"signature_version": "v1",
"digest": {
"function_hash": "281353389378371414182686257912446076538",
"length": 493.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@11f3710417d026ea2f4fcf362d866342c5274185",
"signature_type": "Function",
"target": {
"file": "fs/overlayfs/dir.c",
"function": "ovl_remove_upper"
}
},
{
"id": "CVE-2016-6197-e0e3e320",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"208335419394398629753757663351266607940",
"63242303288994796229026570654665044400",
"203679483710306789883013186762019838473",
"290231047877739249981214762552366362521",
"325544097989342655235131880976163038754",
"160905227426693223185377031778593046472",
"40393037196743324543730270595229621895",
"170165883108187829726066154791750471529",
"97235658339733645444692685573227558871",
"205412927203251815560324956651321959645",
"328029664684540396515583605945581537745",
"133581516045893851264367550013626009283",
"104910228118067997207520334277291915615",
"80311790521427028305772030438308218210",
"243383387837620297934949036561002373765",
"333944364455463548102634309815500491093",
"329464638278438337021771000432284425986",
"308588690385945050823302102536503663179",
"176090551354375559776715104894903124886",
"108253021411433542050904240384912180930",
"237788927757975076579329895596673564332",
"275002030562960543102896661428107892817",
"6672240446880713419495371205884311741",
"295908973563470669776636868418729557101",
"149510282196827407214450358840980700012",
"276011978853204737237546418052100324549",
"183094538042201064506261379859214698044",
"84620531162645122322944788634922130172",
"46245159218490637991103213347750441047",
"295536785205924496949850296362418920268",
"255241666756160299691115134076750682238",
"294754526163000293257430938915804865388",
"34903075481522798989748218467990911749",
"34672375335101417290488660433042844525",
"109608561458298840452614829002094941499",
"45849039673977405380486917806093295640",
"314995414748706779058593600499324203917",
"194447512426532697312014893410921998278",
"328279060337431797802475530706106804729",
"218081954327733026602369248871638677800",
"303039263170511788851569558439591745196",
"273722009540548084932310824716233988025",
"31714241080733385782778333269541203523",
"152325969778786398476540980628986016704",
"105533977898776440314377319593807479467",
"195918306021540712572889670060436797861",
"57469081482028634678159004840023785868"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@11f3710417d026ea2f4fcf362d866342c5274185",
"signature_type": "Line",
"target": {
"file": "fs/overlayfs/dir.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6197.json"
[
{
"id": "CVE-2016-6197-32166251",
"signature_version": "v1",
"digest": {
"function_hash": "281353389378371414182686257912446076538",
"length": 493.0
},
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/11f3710417d026ea2f4fcf362d866342c5274185",
"signature_type": "Function",
"target": {
"file": "fs/overlayfs/dir.c",
"function": "ovl_remove_upper"
}
},
{
"id": "CVE-2016-6197-d79d2b13",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"208335419394398629753757663351266607940",
"63242303288994796229026570654665044400",
"203679483710306789883013186762019838473",
"290231047877739249981214762552366362521",
"325544097989342655235131880976163038754",
"160905227426693223185377031778593046472",
"40393037196743324543730270595229621895",
"170165883108187829726066154791750471529",
"97235658339733645444692685573227558871",
"205412927203251815560324956651321959645",
"328029664684540396515583605945581537745",
"133581516045893851264367550013626009283",
"104910228118067997207520334277291915615",
"80311790521427028305772030438308218210",
"243383387837620297934949036561002373765",
"333944364455463548102634309815500491093",
"329464638278438337021771000432284425986",
"308588690385945050823302102536503663179",
"176090551354375559776715104894903124886",
"108253021411433542050904240384912180930",
"237788927757975076579329895596673564332",
"275002030562960543102896661428107892817",
"6672240446880713419495371205884311741",
"295908973563470669776636868418729557101",
"149510282196827407214450358840980700012",
"276011978853204737237546418052100324549",
"183094538042201064506261379859214698044",
"84620531162645122322944788634922130172",
"46245159218490637991103213347750441047",
"295536785205924496949850296362418920268",
"255241666756160299691115134076750682238",
"294754526163000293257430938915804865388",
"34903075481522798989748218467990911749",
"34672375335101417290488660433042844525",
"109608561458298840452614829002094941499",
"45849039673977405380486917806093295640",
"314995414748706779058593600499324203917",
"194447512426532697312014893410921998278",
"328279060337431797802475530706106804729",
"218081954327733026602369248871638677800",
"303039263170511788851569558439591745196",
"273722009540548084932310824716233988025",
"31714241080733385782778333269541203523",
"152325969778786398476540980628986016704",
"105533977898776440314377319593807479467",
"195918306021540712572889670060436797861",
"57469081482028634678159004840023785868"
]
},
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/11f3710417d026ea2f4fcf362d866342c5274185",
"signature_type": "Line",
"target": {
"file": "fs/overlayfs/dir.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6197.json"