NetSight
IP …
medium5.5

CVE-2016-6197

fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with u…

Impact

fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.

Affected products

VendorProductAffected versions
OracleLinux
Version 6
LinuxLinux Kernel
through 4.5.7
OracleVm Server
Version 3.4

Weakness classification

CWE-20

References