In the Linux kernel, the following vulnerability has been resolved:
cachestat: fix page cache statistics permission checking
When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a much more convenient (and performant) version of mincore() that didn't need mapping things into the user virtual address space in order to work.
But it ended up missing the "check for writability or ownership" fix for mincore(), done in commit 134fca9063ad ("mm/mincore.c: make mincore() more conservative").
This just adds equivalent logic to 'cachestat()', modified for the file context (rather than vma).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-rt-64kUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debugUpgrade kernel-debug-coreUpgrade rvUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade python3-perfUpgrade kernel-rt-64k-debug-coreUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extra-matchedUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade rvUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-s390xUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matched | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-docs | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1029-oemUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-62-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-6.8.0-1031-gcp | Apr 24, 2025 | Feb 10, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub