https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:54:00 +0000 https://vulnerability.circl.lu/vuln/cve-2025-21691 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cachestat: fix page cache statistics permission checking</p> <p>When the &#39;cachestat()&#39; system call was added in commit cf264e1329fb (&#34;cachestat: implement cachestat syscall&#34;), it was meant to be a much more convenient (and performant) version of mincore() that didn&#39;t need mapping things into the user virtual address space in order to work.</p> <p>But it ended up missing the &#34;check for writability or ownership&#34; fix for mincore(), done in commit 134fca9063ad (&#34;mm/mincore.c: make mincore() more conservative&#34;).</p> <p>This just adds equivalent logic to &#39;cachestat()&#39;, modified for the file context (rather than vma).</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cachestat: fix page cache statistics permission checking</p> <p>When the &#39;cachestat()&#39; system call was added in commit cf264e1329fb (&#34;cachestat: implement cachestat syscall&#34;), it was meant to be a much more convenient (and performant) version of mincore() that didn&#39;t need mapping things into the user virtual address space in order to work.</p> <p>But it ended up missing the &#34;check for writability or ownership&#34; fix for mincore(), done in commit 134fca9063ad (&#34;mm/mincore.c: make mincore() more conservative&#34;).</p> <p>This just adds equivalent logic to &#39;cachestat()&#39;, modified for the file context (rather than vma).</p> https://vulnerability.circl.lu/vuln/cve-2025-21691