In the Linux kernel, the following vulnerability has been resolved:
cachefiles: Set object to close if ondemand_id < 0 in copen
If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet.
Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process.
Fix this issue by simply set object to close if its id < 0 in copen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.102-108.177Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-headers | Oct 24, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-devel-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-awsUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04 | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub