What’s Vulnerable › Vulnerabilities

CVE-2024-26612: netfs, fscache: Prevent Oops in fscache_put_cache()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-11 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscache_put_cache() This function dereferences "cache" and then checks if it's IS_ERR_OR_NULL(). Check first, then dereference.

Affected products

• Linux kernel: from 5.17 before 6.1.76; from 6.2 before 6.6.15; from 6.7 before 6.7.3; 6.8-rc1 — fixed in 6.1.76, 6.6.15, 6.7.3

How to fix

Upgrade to a fixed version: Linux kernel 6.1.76, 6.6.15, 6.7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1c45256e599061021e2c848952e50f406457e448
• https://git.kernel.org/stable/c/3be0b3ed1d76c6703b9ee482b55f7e01c369cc68
• https://git.kernel.org/stable/c/4200ad3e46ce50f410fdda302745489441bc70f0
• https://git.kernel.org/stable/c/82a9bc343ba019665d3ddc1d9a180bf0e0390cf3
• https://git.kernel.org/stable/c/1c45256e599061021e2c848952e50f406457e448
• https://git.kernel.org/stable/c/3be0b3ed1d76c6703b9ee482b55f7e01c369cc68
• https://git.kernel.org/stable/c/4200ad3e46ce50f410fdda302745489441bc70f0
• https://git.kernel.org/stable/c/82a9bc343ba019665d3ddc1d9a180bf0e0390cf3

Get alerted when CVE-2024-26612 or the next vulnerability affects your stack