Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — cachefiles: add consistency check for copen/cread
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0022 12.8 —
AFFECTED
Product Versions Fixed
Linux 9032b6e8589f269743984aac53e82e4835be16dc – —
Linux 5.19 – 6.1.101
TIMELINE
Jul 12 Reserved by Linux
Jul 29 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-41075 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add consistency check for copen/cread
This prevents malicious processes from completing random copen/cread
requests and crashing the system. Added checks are listed below:
* Generic, copen can only complete open requests, and cread can only
complete read requests.
* For copen, ondemand_id must not be 0, because this indicates that the
request has not been read by the daemon.
* For cread, the object corresponding to fd and req should be the same.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| July 12, 2024 | Reserved | Reserved by Linux |
| July 29, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-41075 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 9032b6e8589f269743984aac53e82e4835be16dc | — |
| Linux | Linux | — | 5.19 | 6.1.101 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-41075 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.