---
id: CVE-2024-56570
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ovl: Filter invalid inodes with missing lookup function

  Add a check to the ovl_dentry_weird() function to prevent the
  processing of directory inodes that lack the look…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ovl: Filter invalid inodes with missing lookup function

  Add a check to the ovl_dentry_weird() function to prevent the
  processing of directory inodes that lack the look…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 5.4.287
  - 'linux_kernel >= 5.5, < 5.10.231'
  - 'linux_kernel >= 5.11, < 5.15.174'
  - 'linux_kernel >= 5.16, < 6.1.120'
  - 'linux_kernel >= 6.2, < 6.6.64'
  - 'linux_kernel >= 6.7, < 6.12.4'
patched:
  - linux_kernel 6.12.4
published: '2024-12-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:19:16.660'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-56570'
references:
  - url: 'https://git.kernel.org/stable/c/065bf5dd21639f80e68450de16bda829784dbb8c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/72014e7745cc8250bb8f27bd78694dfd3f1b5773'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/749eac5a6687ec99116e0691d0d71225254654e3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c8b359dddb418c60df1a69beea01d1b3322bfe83'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f9248e2f73fb4afe08324485e98c815ac084d166'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ff43d008bbf9b27ada434d6455f039a5ef6cee53'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-355557.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00244
epssPercentile: 0.14671
ingestedAt: '2026-10-15T03:30:12.773Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ovl: Filter invalid inodes with missing lookup function

Add a check to the ovl_dentry_weird() function to prevent the
processing of directory inodes that lack the lookup function.
This is important because such inodes can cause errors in overlayfs
when passed to the lowerstack.

## Affected

- `linux_kernel < 5.4.287`
- `linux_kernel >= 5.5, < 5.10.231`
- `linux_kernel >= 5.11, < 5.15.174`
- `linux_kernel >= 5.16, < 6.1.120`
- `linux_kernel >= 6.2, < 6.6.64`
- `linux_kernel >= 6.7, < 6.12.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.12.4`