In the Linux kernel, the following vulnerability has been resolved:
cachefiles: Set object to close if ondemand_id < 0 in copen
If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.
Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.
Fix this issue by simply set object to close if its id < 0 in copen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.102-108.177Upgrade perfUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo | Oct 24, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-docsUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dlm-kmp-64kb | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-48-generic | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub