The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
cachestat: fix page cache statistics permission checking
When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a much more convenient (and performant) version of mincore() that didn't need mapping things into the user virtual address space in order to work.
But it ended up missing the "check for writability or ownership" fix for mincore(), done in commit 134fca9063ad ("mm/mincore.c: make mincore() more conservative").
This just adds equivalent logic to 'cachestat()', modified for the file context (rather than vma).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-develUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-64k-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64kUpgrade kernel-rt-64k-debugUpgrade rvUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-rt-64k-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-coreUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virt-addons | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 10, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-toolsUpgrade libperfUpgrade kernel-rt-debuginfoUpgrade libperf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extra-matchedUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.11.0-24-generic | Apr 24, 2025 | Feb 10, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub