CVE-2024-27069

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-27069
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27069.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-27069
Downstream
Published
2024-05-01T13:04:23.060Z
Modified
2026-03-14T12:30:07.649672Z
Summary
ovl: relax WARN_ON in ovl_verify_area()
Details

In the Linux kernel, the following vulnerability has been resolved:

ovl: relax WARNON in ovlverify_area()

syzbot hit an assertion in copy up data loop which looks like it is the result of a lower file whose size is being changed underneath overlayfs.

This type of use case is documented to cause undefined behavior, so returning EIO error for the copy up makes sense, but it should not be causing a WARN_ON assertion.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27069.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ca7ab482401cf0a7497dad05f4918dc64115538b
Fixed
c3c85aefc0da1e5074a06c682542a54ccc99bdca
Fixed
77a28aa476873048024ad56daf8f4f17d58ee48e

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27069.json"