In the Linux kernel, the following vulnerability has been resolved:
cachefiles: Set object to close if ondemand_id < 0 in copen
If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.
Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.
Fix this issue by simply set object to close if its id < 0 in copen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-libbpf-devel | Oct 24, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-obs-build | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-6.8.0-48-generic | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub