In the Linux kernel, the following vulnerability has been resolved:
cachestat: fix page cache statistics permission checking
When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a much more convenient (and performant) version of mincore() that didn't need mapping things into the user virtual address space in order to work.
But it ended up missing the "check for writability or ownership" fix for mincore(), done in commit 134fca9063ad ("mm/mincore.c: make mincore() more conservative").
This just adds equivalent logic to 'cachestat()', modified for the file context (rather than vma).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modules-coreUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-64kUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-rt-64k-debug-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-zfcpdump | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-default-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-generic-6.8Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-24-genericUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-gcp-64k-lts-24.04 | Apr 24, 2025 | Feb 10, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub