In the Linux kernel, the following vulnerability has been resolved:
netfs: Call `invalidate_cache` only if implemented
Many filesystems such as NFS and Ceph do not implement the `invalidate_cache` method. On those filesystems, if writing to the cache (`NETFS_WRITE_TO_CACHE`) fails for some reason, the kernel crashes like this:
BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor instruction fetch in kernel mode #PF: error_code(0x0010) - not-present page PGD 0 P4D 0 Oops: Oops: 0010 [#1] SMP PTI CPU: 9 UID: 0 PID: 3380 Comm: kworker/u193:11 Not tainted 6.13.3-cm4all1-hp #437 Hardware name: HP ProLiant DL380 Gen9/ProLiant DL380 Gen9, BIOS P89 10/17/2018 Workqueue: events_unbound netfs_write_collection_worker RIP: 0010:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 0018:ffff9b86e2ca7dc0 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7fffffffffffffff RDX: 0000000000000001 RSI: ffff89259d576a18 RDI: ffff89259d576900 RBP: ffff89259d5769b0 R08: ffff9b86e2ca7d28 R09: 0000000000000002 R10: ffff89258ceaca80 R11: 0000000000000001 R12: 0000000000000020 R13: ffff893d158b9338 R14: ffff89259d576900 R15: ffff89259d5769b0 FS: 0000000000000000(0000) GS:ffff893c9fa40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 000000054442e003 CR4: 00000000001706f0 Call Trace: <TASK> ? __die+0x1f/0x60 ? page_fault_oops+0x15c/0x460 ? try_to_wake_up+0x2d2/0x530 ? exc_page_fault+0x5e/0x100 ? asm_exc_page_fault+0x22/0x30 netfs_write_collection_worker+0xe9f/0x12b0 ? xs_poll_check_readable+0x3f/0x80 ? xs_stream_data_receive_workfn+0x8d/0x110 process_one_work+0x134/0x2d0 worker_thread+0x299/0x3a0 ? __pfx_worker_thread+0x10/0x10 kthread+0xba/0xe0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x30/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 0000000000000000
This patch adds the missing `NULL` check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf6.12Upgrade kernel-headersUpgrade kernel-livepatch-6.12.22-27.96Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-azure-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-azure-6.11Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-azure-fde-edgeUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-azure-fde-6.11Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-6.11Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1014-raspi | Jun 26, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub