CVE-2025-21836

🗓️ 07 Mar 2025 09:09:56Reported by LinuxType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 109 Views

Linux kernel CVE-2025-21836 fixes io_uring buffer list reallocation issue on upgrade.

Reporter	Title	Published	Views	Family All 135
ATTACKERKB	CVE-2025-21836	7 Mar 202509:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в linux-6.12	16 Jun 202511:28	–	astralinux
Circl	CVE-2025-21836	7 Mar 202512:25	–	circl
CNNVD	Linux kernel 安全漏洞	7 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-21836 io_uring/kbuf: reallocate buf lists on upgrade	7 Mar 202509:09	–	cvelist
Debian CVE	CVE-2025-21836	7 Mar 202509:09	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	17 Jul 202500:00	–	oraclelinux
EUVD	EUVD-2025-7587	3 Oct 202520:07	–	euvd
Hewlett-Packard	HP ThinPro 8.1 SP8 Security Updates	27 Oct 202500:00	–	hp
NVD	CVE-2025-21836	7 Mar 202509:15	–	nvd

NVD

Vulners

CNA

Node

linux linux_kernelRange5.19–6.6.79

linux linux_kernelRange6.7–6.12.16

linux linux_kernelRange6.13–6.13.4

linux linux_kernelMatch6.14rc1

linux linux_kernelMatch6.14rc2

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "io_uring/kbuf.c"
    ],
    "versions": [
      {
        "version": "2fcabce2d7d34f69a888146dab15b36a917f09d4",
        "lessThan": "146a185f6c05ee263db715f860620606303c4633",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2fcabce2d7d34f69a888146dab15b36a917f09d4",
        "lessThan": "7d0dc28dae836caf7645fef62a10befc624dd17b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2fcabce2d7d34f69a888146dab15b36a917f09d4",
        "lessThan": "2a5febbef40ce968e295a7aeaa5d5cbd9e3e5ad4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "2fcabce2d7d34f69a888146dab15b36a917f09d4",
        "lessThan": "8802766324e1f5d414a81ac43365c20142e85603",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "io_uring/kbuf.c"
    ],
    "versions": [
      {
        "version": "5.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.79",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.16",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.13.4",
        "lessThanOrEqual": "6.13.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.14",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/8802766324e1f5d414a81ac43365c20142e85603
git	www.git.kernel.org/stable/c/7d0dc28dae836caf7645fef62a10befc624dd17b
git	www.git.kernel.org/stable/c/2a5febbef40ce968e295a7aeaa5d5cbd9e3e5ad4
u1f383	www.u1f383.github.io/slides/talks/2025_Hexacon-Deja_Vu_in_Linux_io_uring_Breaking_Memory_Sharing_Again_After_Generations_of_Fixes.pdf
git	www.git.kernel.org/stable/c/146a185f6c05ee263db715f860620606303c4633

11 May 2026 21:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.5

EPSS0.0001