In the Linux kernel, the following vulnerability has been resolved:
cachefiles: Fix NULL pointer dereference in object->file
At present, the object->file has the NULL pointer dereference problem in ondemand-mode. The root cause is that the allocated fd and object->file lifetime are inconsistent, and the user-space invocation to anon_fd uses object->file. Following is the process that triggers the issue:
[write fd] [umount] cachefiles_ondemand_fd_write_iter fscache_cookie_state_machine cachefiles_withdraw_cookie if (!file) return -ENOBUFS cachefiles_clean_up_object cachefiles_unmark_inode_in_use fput(object->file) object->file = NULL // file NULL pointer dereference! __cachefiles_write(..., file, ...)
Fix this issue by add an additional reference count to the object->file before write/llseek, and decrement after it finished.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-headersUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.131-143.221Upgrade bpftoolUpgrade kernelUpgrade kernel-devel | Apr 2, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools | Apr 1, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcp | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub