CVE-2025-71149

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-71149

CVE-2025-71149 is reported in multiple advisories as a Linux kernel io_uring/poll issue. The root cause is incorrect handling of the return value from io_poll_add() during updates, which can affect completion/event signaling (CQEs) for POLL_ADD/POLL_REMOVE scenarios. Affected advisories reference...

CVE-2025-71149

Removed by vendor...

Linux Distros Unpatched Vulnerability : CVE-2025-71149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/poll: correctly handle iopolladd return value on update When the core of iouring was...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35827)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35827 advisory. - In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix overflow check ...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2023-52654)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52654 advisory. - In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: disable sending...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21863)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21863 advisory. - In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation...

MiracleLinux 9 : kernel-5.14.0-570.16.1.el9_6 (AXSA:2025-10431:39)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10431:39 advisory. kernel: iouring/sqpoll: zero sqd-thread on tctx errors CVE-2025-21633 kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003841 advisory. A use-after-free flaw was found in the iouring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system Th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004310 advisory. There is a logic error in iouring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the ioprepasyncwor...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004447 advisory. An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003827 advisory. An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-004113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004113 advisory. An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c3...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001513 advisory. An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c3...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004466)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004466 advisory. An issue was discovered in the Linux kernel before 5.9.3. iouring takes a non-refcounted reference to the filesstruct of the process that submitted a request, causin...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001402)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001402 advisory. An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004793 advisory. There is a logic error in iouring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the ioprepasyncwor...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004478 advisory. A use-after-free flaw was found in the iouring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system Th...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004760 advisory. A flaw was found in the Linux kernels iouring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalat...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001219)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001219 advisory. The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memr...