In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add missing lock protection when polling
Add missing lock protection in poll routine when iterating xarray, otherwise:
Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while the data structure (e.g. struct cachefiles_req) stored in the slot has no such guarantee. The poll routine will iterate the radix tree and dereference cachefiles_req accordingly. Thus RCU read lock is not adequate in this case and spinlock is needed here.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-lgUpgrade dtb-armUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-devel-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1002-gkeop | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub