PT-2022-7497 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.17.0-smp-DEV 801 Description: The vulnerability is related to the io uring component in the Linux kernel. Looping approximately 65535 times doing kmalloc calls can trigger soft lockups, especially with DEBUG features...

PT-2021-26995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.5 Description The issue concerns a problem with cancellation for EXITING tasks in io uring. It was introduced in version v5.15 and fixed in version v5.15.6. The actual impact and attack plausibility ha...

CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to execute io-uring requests to...

PT-2021-30167

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.11 Description The issue concerns the io uring feature, which allows for conditional reschedule for intensive iterators. The actual impact and attack plausibility have not yet been proven. Recommendations F...

CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

UBUNTU-CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

PT-2021-6072

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.10 through 5.14.6 Description The issue is related to a buffer overflow in the loop rw iter function in the Linux kernel's io uring subsystem, allowing local users to gain privileges. This is due to an error in the...

PT-2021-7118

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15-rc1 Description The issue is related to the io-workqueue implementation in the Linux kernel, which lacks protection of internal data. This can be exploited to cause a denial of service. A local user with...

PT-2021-8040

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw was found in the Linux kernel’s io uring implementation, allowing an attacker with a local account to corrupt system memory, crash the system, or escalate privileges. The issue is...

PT-2021-8251 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the io init wq offload function of the Linux kernel's io uring component. This leak occurs when io uring enter is called in parallel, causing t...

PT-2021-29235

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.26 through v5.10.42 Description The issue is related to io uring in the Linux Kernel. It was introduced in version v5.10.26 and fixed in version v5.10.43. The actual impact and attack plausibility have not yet been...

PT-2021-29269

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.9 Description The issue is related to io uring in the Linux Kernel. It was introduced in version v5.12 and fixed in version v5.12.10. The actual impact and attack plausibility have not yet been proven...

PT-2021-25241

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.26 through v5.10.42 Description The issue is related to io uring in the Linux Kernel. It was introduced in version v5.10.26 and fixed in version v5.10.43. The actual impact and attack plausibility have not yet been...

PT-2021-24530

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.2 Description: The issue is related to a problem with shared sqpoll cancellation hangs in io uring. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-1369 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s io uring subsystem, allowing a local user to crash or escalate their privileges on the system. This issue is related to the way a...

PT-2024-11062 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the io uring feature in the Linux kernel, where the function io uring cancel sqpoll is intended to cancel all requests of a specified context. However, it uses...

PT-2022-2644 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.4.189 Description: The issue is related to an integer overflow in the io uring interface of the Linux Kernel, which can be exploited by a local attacker to cause memory corruption and escalate privileges to th...

PT-2021-7582

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.10.x through 5.10.154 Description The issue is related to a use-after-free in the io sqpoll wait sq function in fs/io uring.c, which allows an attacker to crash the kernel, resulting in denial of service. The finish wai...

PT-2021-1528

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.160 Description The issue is related to a use-after-free vulnerability in the Linux kernel through io uring and the IORING OP SPLICE operation. If IORING OP SPLICE is missing the IO WQ WORK FILES flag, which...

PT-2021-1525 · Google +1 · Android Kernel +1

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a use after free in the io uring subsystem of the Linux kernel, which could lead to local escalation of privilege with System execution privileges needed. User interaction is not required fo...