In the Linux kernel, the following vulnerability has been resolved:
cachestat: fix page cache statistics permission checking
When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a much more convenient (and performant) version of mincore() that didn't need mapping things into the user virtual address space in order to work.
But it ended up missing the "check for writability or ownership" fix for mincore(), done in commit 134fca9063ad ("mm/mincore.c: make mincore() more conservative").
This just adds equivalent logic to 'cachestat()', modified for the file context (rather than vma).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-64k-debugUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-develUpgrade kernel-coreUpgrade rtlaUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-64k-modulesUpgrade libperfUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade perf | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade libperfUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade rtlaUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-default-vdso | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1027-oracle-64k | Apr 24, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub