CVE-2019-10140

Name: CVE-2019-10140
Creator: NVD / NIST
Published: 2019-08-15T17:15:12.083+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.32%

Last modified Jun 17, 2026

CVE-2019-10140 is a vulnerability of currently unknown severity. A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. EPSS estimates a 0.32% chance of exploitation in the next 30 days.

Description

A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).

Metrics

EPSS Probability

0.32%

23.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Linux	Linux Kernel	<= 3.10
Redhat	Enterprise Linux	7.0

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10140Issue Tracking, Third Party Advisory
https://security.netapp.com/advisory/ntap-20190905-0002/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10140Issue Tracking, Third Party Advisory
https://security.netapp.com/advisory/ntap-20190905-0002/

Timeline

Published: Aug 15, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-10140?

How severe is CVE-2019-10140?

Severity scoring for CVE-2019-10140 is pending analysis. The EPSS model estimates a 0.32% probability of exploitation in the next 30 days.

How do I fix CVE-2019-10140?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-10140?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST