In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add missing lock protection when polling
Add missing lock protection in poll routine when iterating xarray, otherwise:
Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while the data structure (e.g. struct cachefiles_req) stored in the slot has no such guarantee. The poll routine will iterate the radix tree and dereference cachefiles_req accordingly. Thus RCU read lock is not adequate in this case and spinlock is needed here.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-azureUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm | Nov 4, 2024 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub