CVE-2026-74619

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the overlay filesystem (ovl) where an unprivileged task can trigger a WARN ON() condition in the ovl fill super() function. This occurs when a mount is completed from a different user namespace than the one that created the context. Specifically, fsopen() records the caller's user namespace in fc->user ns, but the task calling fsconfig(FSCONFIG CMD CREATE) is not tied to the original task. Because this is a WARN ON() rather than a WARN ON ONCE(), the condition can be triggered repeatedly in a loop, leading to kernel tainting, log flooding, or a system panic if the kernel is configured with panic on warn.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.