Description
In the Linux kernel, the following vulnerability has been resolved: cachefiles: add consistency check for copen/cread This prevents malicious processes from completing random copen/cread requests and crashing the system. Added checks are listed below: * Generic, copen can only complete open requests, and cread can only complete read requests. * For copen, ondemand_id must not be 0, because this indicates that the request has not been read by the daemon. * For cread, the object corresponding to fd and req should be the same.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9032b6e8589f269743984aac53e82e4835be16dc to < 3b744884c0431b5a62c92900e64bfd0ed61e8e2aaffected9032b6e8589f269743984aac53e82e4835be16dc to < 36d845ccd7bf527110a65fe953886a176c209539affected9032b6e8589f269743984aac53e82e4835be16dc to < 8aaa6c5dd2940ab934d6cd296175f43dbb32b34aaffected9032b6e8589f269743984aac53e82e4835be16dc to < a26dc49df37e996876f50a0210039b2d211fdd6faffected
Linux Linux
Default version status: affected
5.19affected0 to < 5.19unaffected6.1.101 to ≤ 6.1.*unaffected6.6.42 to ≤ 6.6.*unaffected6.9.11 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3b744884c0431b5a62c92900e64bfd0ed61e8e2a ↗
- https://git.kernel.org/stable/c/36d845ccd7bf527110a65fe953886a176c209539 ↗
- https://git.kernel.org/stable/c/8aaa6c5dd2940ab934d6cd296175f43dbb32b34a ↗
- https://git.kernel.org/stable/c/a26dc49df37e996876f50a0210039b2d211fdd6f ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗