CVE-2026-98921

The Linux kernel contains a Use-After-Free (UAF) vulnerability in the ovl_do_mkdir() function within the overlay filesystem component. The issue occurs because the function prints the input dentry using %pd after calling vfs_mkdir(). Since a recent change in vfs_mkdir() causes it to call end_crea...

EUVD-2026-108885

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldomkdir debug print ovldomkdir prints the input dentry with %pd after vfsmkdir. Since commit fe497f0759e0 "VFS: change vfsmkdir to unlock on failure.", vfsmkdir calls endcreating on the input dentry on failure...