CVE-2024-46748: cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT Set the maximum size of a subrequest that writes to cachefiles to be MAX_RW_COUNT so that we don't overrun the maximum write we can make to the backing filesystem.

Affected products

Linux kernel: from 6.10 before 6.10.10 — fixed in 6.10.10

How to fix

Upgrade to a fixed version: Linux kernel 6.10.10. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/51d37982bbac3ea0ca21b2797a9cb0044272b3aa
https://git.kernel.org/stable/c/cec226f9b1fd6cf55bc157873aec61b523083e96

Get alerted when CVE-2024-46748 or the next vulnerability affects your stack