CVE-2026-98921

In the Linux kernel, the following vulnerability has been resolved:

ovl: fix UAF in ovl do mkdir() debug print

ovl do mkdir() prints the input dentry with %pd after vfs mkdir(). Since commit fe497f0759e0 ("VFS: change vfs mkdir() to unlock on failure."), vfs mkdir() calls end creating() on the input dentry on failure and may replace it on success, so the post-call %pd can use-after-free the dentry when CONFIG OVERLAY FS DEBUG is enabled.

Print the dentry before the call and only the result afterward.