In the Linux kernel, the following vulnerability has been resolved:
cachestat: do not flush stats in recency check
syzbot detects that cachestat() is flushing stats, which can sleep, in its RCU read section (see [1]). This is done in the workingset_test_recent() step (which checks if the folio's eviction is recent).
Move the stat flushing step to before the RCU read section of cachestat, and skip stat flushing during the recency check.
[1]: https://lore.kernel.org/cgroups/[email protected]/
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1014-raspi | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub