CVE-2026-89767

CVE-2026-89767 is a Linux kernel overlayfs vulnerability in ovl_create_real() that causes a double call to end_creating() when a casefold consistency check fails on directory creation. This results in the parent directory's i_rwsem being unlocked twice and the dentry being released twice, wedgein...

EUVD-2026-76679

In the Linux kernel, the following vulnerability has been resolved: ovl: fix double endcreating on the casefold-mismatch path ovlcreatereal releases the new dentry twice when the casefold consistency check fails. The SIFDIR branch calls endcreating and sets err, then falls through to the common...