Azure Linux 3.0 Security Update: kernel (CVE-2024-41057)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41057 advisory. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in...

EUVD-2022-55140

In the Linux kernel, the following vulnerability has been resolved: cachefiles: unmark inode in use in error path Unmark inode in use if error encountered. If the in-use flag leakage occurs in cachefilesopenfile, Cachefiles will complain "Inode already in use" when later another cookie with the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391635 advisory. In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefilesaddcache The following memory leak was reported after...

EUVD-2024-53197

Malicious code in bioql PyPI...

EUVD-2022-55142

Malicious code in bioql PyPI...

cachefiles: Fix NULL pointer dereference in object->file

...

cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT

...

Linux Distros Unpatched Vulnerability : CVE-2024-39510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemanddaemonread We got the following iss...

Linux Distros Unpatched Vulnerability : CVE-2024-40899

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemandgetfd We got the following issue i...

Linux Distros Unpatched Vulnerability : CVE-2024-42250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock protection in poll...

Linux Distros Unpatched Vulnerability : CVE-2024-40913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anonfd until after copytouser succeeds After installing the...

Linux Distros Unpatched Vulnerability : CVE-2024-41051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: wait for ondemandobjectworker to finish when dropping object When queuing...

Linux Distros Unpatched Vulnerability : CVE-2022-49064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: unmark inode in use in error path Unmark inode in use if error encountered. If t...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/namei.c module of the Linux kernel is related to a memory overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux fs/cachefiles/xattr.c Heap Buffer Overflow DoS

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/xattr.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: cachefiles: fix memory leak in cachefiles_add_cache()

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefilesaddcache The Linux kernel CVE team has assigned CVE-2024-26840 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041715-CVE-2024-26840-057d@gregkh/T...

kernel: cachefiles: fix dentry leak in cachefiles_open_file()

A flaw was found in the Linux kernel's cachefiles component. A local attacker could exploit a dentry directory entry leak caused by a concurrency issue between a lookup cookie and a cull operation. This flaw prevents the proper release of a reference count, which can lead to resource exhaustion a...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero CVE-2024-26982 In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object-file...

Linux cachefiles Heap Buffer Overflow Privilege Escalation

The vulnerability of the cachefilesdaemonopen function in the cachefiles component of the Linux kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

CacheFiles Component Buffer Overflow DoS

The vulnerabilities of the functions cachefilesopenfile, fput, and cachefileslookupobject in the CacheFiles component of the Linux kernel are related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting these vulnerabilities could allow an attacker t...