High · published July 29, 2024
In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add consistency check for copen/cread
This prevents malicious processes from completing random copen/cread
requests and crashing the system. Added checks are listed below:
* Generic, copen can only complete open requests, and cread can only
complete read requests.
* For copen, ondemand_id must not be 0, because this indicates that the
request has not been read by the daemon.
* For cread, the object corresponding to fd and req should be the same.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.19, < 6.1.101 | 6.1.101 |
| linux/linux_kernel | ≥ 6.2, < 6.6.42 | 6.6.42 |
| linux/linux_kernel | ≥ 6.7, < 6.9.11 | 6.9.11 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |