ubuntu · CVE-2016-6197

Quick triage

Priority: low Published: 2016-08-06 00:00:00 UTC Updated: 2025-09-25 12:18:01 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-6197 low priority: Ubuntu including 104 source packages (linux, linux-armadaxp, …), 1064 status rows across 17 suites (artful, bionic, cosmic, disco, eoan, focal, jammy, noble, oracular, plucky, precise, trusty, upstream, wily, xenial, yakkety, zesty): DNE 739, not-affected 180, released 108, ignored 37.

Description:

fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.

cvelogic Threat Intelligence