CVE-2019-10140

Name of the Vulnerable Software and Affected Versions Linux kernel versions up to 3.10

Description A denial of service situation can be created by an attacker with local access via a NULL pointer dereference in the ovl posix acl create function in fs/overlayfs/dir.c. This allows attackers who can create directories on overlayfs to crash the kernel, resulting in a denial of service. The issue is related to errors in pointer dereferencing in the ovl posix acl create function.

Recommendations For Linux kernel versions up to 3.10, as a temporary workaround, consider restricting access to the ovl posix acl create function in fs/overlayfs/dir.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.