In the Linux kernel, the following vulnerability has been resolved:
mm: cachestat: fix folio read-after-free in cache walk
In cachestat, we access the folio from the page cache's xarray to compute its page offset, and check for its dirty and writeback flags. However, we do not hold a reference to the folio before performing these actions, which means the folio can concurrently be released and reused as another folio/page/slab.
Get around this altogether by just using xarray's existing machinery for the folio page offsets and dirty/writeback states.
This changes behavior for tmpfs files to now always report zeroes in their dirty and writeback counters. This is okay as tmpfs doesn't follow conventional writeback cache behavior: its pages get "cleaned" during swapout, after which they're no longer resident etc.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-64kUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernelUpgrade rvUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extra | Nov 4, 2024 | Mar 13, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 13, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Mar 13, 2024 |
| Rocky_linux | — | Upgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug | Sep 17, 2024 | Mar 13, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Mar 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub