ovl: Fix warning in ovl_create_real() in Kernel

Kernel Updated 02 Oct 2025

Summary

27/12/2021

Disclosed on

N/A

Severity

No i

Fix available

Unrated

Severity

Not published

CVSS Score

GSD-2021-1002660: ovl: fix warning in ovl_create_real(). Affects Kernel versions < 445d2dc63e5871d218f21b8f62ab29ac72f2e6b8. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

The Kernel is a fundamental component of the Linux operating system that manages core system functions. It provides an interface between the hardware and software layers, allowing applications to access system resources. The ovl_create_real() function is part of the OverlayFS (ovl) filesystem, which allows multiple filesystems to be layered on top of each other. This function is responsible for creating a new file in the OverlayFS. However, there is a warning in the implementation of ovl_create_real() that needs to be addressed.

Vulnerability Detail

The vulnerability in ovl_create_real() can lead to potential security issues. Although the impact and attack plausibility have not been proven, it is essential to fix the warning to ensure the stability and security of the Kernel. The warning may indicate a potential flaw or vulnerability that could be exploited by attackers. Therefore, it is crucial to address this warning to prevent any potential security breaches.

How To Fix

No fixed version is published for this vulnerability.

To fix the warning in ovl_create_real(), the Linux Kernel developers have released a patch in version v4.19.222. The patch can be obtained from the official Linux Kernel repository. Developers and system administrators should update their Kernel to the latest version that includes the fix. By applying the patch, the warning in ovl_create_real() will be resolved, ensuring the stability and security of the Kernel.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Conclusion

The warning in ovl_create_real() in the Kernel should be addressed to ensure the stability and security of the system. By updating the Kernel to version v4.19.222 or later, which includes the necessary patch, the warning can be resolved. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for Kernel →