In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add missing lock protection when polling
Add missing lock protection in poll routine when iterating xarray, otherwise:
Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while the data structure (e.g. struct cachefiles_req) stored in the slot has no such guarantee. The poll routine will iterate the radix tree and dereference cachefiles_req accordingly. Thus RCU read lock is not adequate in this case and spinlock is needed here.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-nvidia-64k | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub