All vulnerabilities
CVE-2026-93810

Linux: cachefiles: Fix double fput

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
7.0High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in246098a2b8e88761e92cf82c1be1ec576437b176Also 90b306eee037d0a6a8f4aac834b46e05c5ddd0bfCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 246098a2b8e88761e92cf82c1be1ec576437b176LinuxCVE List
  • 90b306eee037d0a6a8f4aac834b46e05c5ddd0bfLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

cachefiles: Fix double fput

Fix a double fput() in error handling in cachefiles_create_tmpfile().

Text from CVE List

Affected versions 12

  • Linuxaffected: 24a81759b65fa85767739999d91523691c5e2ea5 before e582a3e99584d5a634a3cbce4b12e9381fd5d964CVE List
  • Linuxaffected: 24a81759b65fa85767739999d91523691c5e2ea5 before 246098a2b8e88761e92cf82c1be1ec576437b176CVE List
  • Linuxaffected: 24a81759b65fa85767739999d91523691c5e2ea5 before e9c2e68c3890a935abbd5f54dbce653f9a16836cCVE List
  • Linuxaffected: 24a81759b65fa85767739999d91523691c5e2ea5 before 90b306eee037d0a6a8f4aac834b46e05c5ddd0bfCVE List
  • Linuxaffected: 24a81759b65fa85767739999d91523691c5e2ea5 before af6830cc12dfe86c832dccc9c9878a93aaa22f83CVE List
  • Linuxaffected: 6.1CVE List
  • Linuxunaffected: all versions before 6.1CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 5