CVE-2025-21691

cachestat: fix page cache statistics permission checking

MEDIUM
5.5
CVSS Score
Published: February 10, 2025 at 03:58 PM UTC
Updated: June 17, 2026 at 08:44 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: cachestat: fix page cache statistics permission checking When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a much more convenient (and performant) version of mincore() that didn't need mapping things into the user virtual address space in order to work. But it ended up missing the "check for writability or ownership" fix for mincore(), done in commit 134fca9063ad ("mm/mincore.c: make mincore() more conservative"). This just adds equivalent logic to 'cachestat()', modified for the file context (rather than vma).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.5 ≤ v < 6.12.126.5 ≤ v < 6.13.16.5 ≤ v < 6.146.5 ≤ v < 6.6.756.7 ≤ v < 6.12.126.136.5cf264e1329fb0307e044f7675849f9f38b44c11a
Vendor states this is fixed in 5f537664e705b0bf8b7e329861f20128534f6a83 (fixed)
Vendor states this is fixed in 780ab8329672464984cf1344bd5c3993af0226c7 (fixed)
Vendor states this is fixed in 7d6405c13b0d8a8367cd8df63f118b619a3f0dd2 (fixed)
Vendor states this is fixed in 97153a05077f618f7471f50a78158602badccb30 (fixed)
Vendor states this is fixed in 6.12.12 (unaffected)
Vendor states this is fixed in 6.13.1 (unaffected)
Vendor states this is fixed in 6.14 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Vendor states this is fixed in 6.6.75 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5f537664e705b0bf8b7e329861f20128534f6a83
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/780ab8329672464984cf1344bd5c3993af0226c7
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7d6405c13b0d8a8367cd8df63f118b619a3f0dd2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/97153a05077f618f7471f50a78158602badccb30

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card