A vulnerability was found in Linux kernels, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | * | 3.10 (including) |
| Red Hat Enterprise Linux 7 | RedHat | kernel-rt-0:3.10.0-1062.rt56.1022.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | kernel-0:3.10.0-1062.el7 | * |