CVE-2026-10681 SMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

The vulnerability of the function io_files_update_with_index_alloc() in the fs/io_uring.c module of the io_uring component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the iofilesupdatewithindexalloc function in the fs/iouring.c module of the iouring component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in Linux kernel versions prior to 5.19, which stems from a null pointer dereference in its iofilesupdatewithindexalloc component, which...

CVE-2022-4127

A NULL pointer dereference issue was discovered in the Linux kernel in iofilesupdatewithindexalloc. A local user could use this flaw to potentially crash the system causing a denial of service...