EUVD-2024-53197

Malicious code in bioql PyPI...

cachefiles: Fix NULL pointer dereference in object->file

...

cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT

...

Linux Distros Unpatched Vulnerability : CVE-2024-39510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemanddaemonread We got the following iss...

Linux Distros Unpatched Vulnerability : CVE-2024-40899

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemandgetfd We got the following issue i...

Linux Distros Unpatched Vulnerability : CVE-2024-42250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock protection in poll...

Linux Distros Unpatched Vulnerability : CVE-2024-40913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anonfd until after copytouser succeeds After installing the...

Linux Distros Unpatched Vulnerability : CVE-2024-41051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: wait for ondemandobjectworker to finish when dropping object When queuing...

Linux Distros Unpatched Vulnerability : CVE-2022-49064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: unmark inode in use in error path Unmark inode in use if error encountered. If t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cachefiles: A NULL pointer dereference issue in object-file has been fixed. Currently, there is a NULL pointer dereference problem in ondemand-mode. The root cause is that the allocated file descriptor fd and the lifetime of...

The vulnerability of the cachefiles_set_volume_xattr() function in the fs/cachefiles/xattr.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/xattr.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cachefiles_set_volume_xattr() function in the fs/cachefiles/namei.c module of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/namei.c module of the Linux kernel is related to a memory overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: cachefiles: fix memory leak in cachefiles_add_cache()

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefilesaddcache The Linux kernel CVE team has assigned CVE-2024-26840 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041715-CVE-2024-26840-057d@gregkh/T...

kernel: cachefiles: fix dentry leak in cachefiles_open_file()

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefilesopenfile A dentry leak may be caused when a lookup cookie and a cull are concurrent: P1 | P2 ----------------------------------------------------------- cachefileslookupcookie...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero CVE-2024-26982 In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object-file...

The vulnerability of the cachefiles_daemon_open() function in the cachefiles component of the Linux operating system allows a hacker to gain elevated privileges within the system.

The vulnerability of the cachefilesdaemonopen function in the cachefiles component of the Linux kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerabilities of the functions cachefiles_open_file(), fput(), and cachefiles_look_up_object() of the CacheFiles component in the Linux kernel allow a hacker to cause a service failure.

The vulnerabilities of the functions cachefilesopenfile, fput, and cachefileslookupobject in the CacheFiles component of the Linux kernel are related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting these vulnerabilities could allow an attacker t...

Linux Distros Unpatched Vulnerability : CVE-2024-49870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: fix dentry leak in cachefilesopenfile A dentry leak may be caused when a lookup cookie and a cull are concurrent: P1 | P2...

Linux Distros Unpatched Vulnerability : CVE-2024-40935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: flush all requests after setting CACHEFILESDEAD In ondemand mode, when the daemo...

Linux Distros Unpatched Vulnerability : CVE-2024-46748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: Set the max subreq size for cache writes to MAXRWCOUNT Set the maximum size of a subrequest that writes to cachefiles to be MAXRWCOUNT so that we...