In the Linux kernel, the following vulnerability has been resolved:
netfs: Call `invalidate_cache` only if implemented
Many filesystems such as NFS and Ceph do not implement the `invalidate_cache` method. On those filesystems, if writing to the cache (`NETFS_WRITE_TO_CACHE`) fails for some reason, the kernel crashes like this:
BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor instruction fetch in kernel mode #PF: error_code(0x0010) - not-present page PGD 0 P4D 0 Oops: Oops: 0010 [#1] SMP PTI CPU: 9 UID: 0 PID: 3380 Comm: kworker/u193:11 Not tainted 6.13.3-cm4all1-hp #437 Hardware name: HP ProLiant DL380 Gen9/ProLiant DL380 Gen9, BIOS P89 10/17/2018 Workqueue: events_unbound netfs_write_collection_worker RIP: 0010:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 0018:ffff9b86e2ca7dc0 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7fffffffffffffff RDX: 0000000000000001 RSI: ffff89259d576a18 RDI: ffff89259d576900 RBP: ffff89259d5769b0 R08: ffff9b86e2ca7d28 R09: 0000000000000002 R10: ffff89258ceaca80 R11: 0000000000000001 R12: 0000000000000020 R13: ffff893d158b9338 R14: ffff89259d576900 R15: ffff89259d5769b0 FS: 0000000000000000(0000) GS:ffff893c9fa40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 000000054442e003 CR4: 00000000001706f0 Call Trace: <TASK> ? __die+0x1f/0x60 ? page_fault_oops+0x15c/0x460 ? try_to_wake_up+0x2d2/0x530 ? exc_page_fault+0x5e/0x100 ? asm_exc_page_fault+0x22/0x30 netfs_write_collection_worker+0xe9f/0x12b0 ? xs_poll_check_readable+0x3f/0x80 ? xs_stream_data_receive_workfn+0x8d/0x110 process_one_work+0x134/0x2d0 worker_thread+0x299/0x3a0 ? __pfx_worker_thread+0x10/0x10 kthread+0xba/0xe0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x30/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 0000000000000000
This patch adds the missing `NULL` check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.12.22-27.96Upgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-devel | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-source | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-azure-fde-6.11Upgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-6.11Upgrade linux-image-genericUpgrade linux-image-azure-fde-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-realtime | Jun 26, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub