https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:53:32 +0000 https://cve.radiocsirt.org/vuln/cve-2024-26630 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mm: cachestat: fix folio read-after-free in cache walk</p> <p>In cachestat, we access the folio from the page cache&#39;s xarray to compute its page offset, and check for its dirty and writeback flags. However, we do not hold a reference to the folio before performing these actions, which means the folio can concurrently be released and reused as another folio/page/slab.</p> <p>Get around this altogether by just using xarray&#39;s existing machinery for the folio page offsets and dirty/writeback states.</p> <p>This changes behavior for tmpfs files to now always report zeroes in their dirty and writeback counters. This is okay as tmpfs doesn&#39;t follow conventional writeback cache behavior: its pages get &#34;cleaned&#34; during swapout, after which they&#39;re no longer resident etc.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mm: cachestat: fix folio read-after-free in cache walk</p> <p>In cachestat, we access the folio from the page cache&#39;s xarray to compute its page offset, and check for its dirty and writeback flags. However, we do not hold a reference to the folio before performing these actions, which means the folio can concurrently be released and reused as another folio/page/slab.</p> <p>Get around this altogether by just using xarray&#39;s existing machinery for the folio page offsets and dirty/writeback states.</p> <p>This changes behavior for tmpfs files to now always report zeroes in their dirty and writeback counters. This is okay as tmpfs doesn&#39;t follow conventional writeback cache behavior: its pages get &#34;cleaned&#34; during swapout, after which they&#39;re no longer resident etc.</p> https://cve.radiocsirt.org/vuln/cve-2024-26630