In the Linux kernel, the following vulnerability has been resolved:
cachefiles: Set object to close if ondemand_id < 0 in copen
If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.
Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.
Fix this issue by simply set object to close if its id < 0 in copen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel | Oct 24, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade dtb-qcom | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04 | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub