In the Linux kernel, the following vulnerability has been resolved:
cachestat: fix page cache statistics permission checking
When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a much more convenient (and performant) version of mincore() that didn't need mapping things into the user virtual address space in order to work.
But it ended up missing the "check for writability or ownership" fix for mincore(), done in commit 134fca9063ad ("mm/mincore.c: make mincore() more conservative").
This just adds equivalent logic to 'cachestat()', modified for the file context (rather than vma).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-modulesUpgrade perfUpgrade kernel-rtUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modulesUpgrade libperfUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade rvUpgrade kernel-rt-64k-debug-develUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64kUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-devel | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade rtlaUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extra-matchedUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade perfUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-devel | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-docs-html | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1029-oemUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-62-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-oem-22.04 | Apr 24, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub