PT-2026-121893
CVE-2026-98921
·
Published
2026-10-23
·
Updated
2026-10-23
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
ovl: fix UAF in ovl do mkdir() debug print
ovl do mkdir() prints the input dentry with %pd after vfs mkdir().
Since commit fe497f0759e0 ("VFS: change vfs mkdir() to unlock on
failure."), vfs mkdir() calls end creating() on the input dentry on
failure and may replace it on success, so the post-call %pd can
use-after-free the dentry when CONFIG OVERLAY FS DEBUG is enabled.
Print the dentry before the call and only the result afterward.
Found an issue in the description? Have something to add? Feel free to write us 👾