2221 matches found
USN-7383-2 linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Ublk userspace block driver; -...
The vulnerability of the io_ring_buffer_select() function in the io_uring component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ioringbufferselect function in the iouring component of the Linux operating system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions io_write_prep() and io_write() in the kernel code of the Linux operating system’s io_uring/io_uring.c module, which allow a hacker to cause a service failure.
The vulnerabilities of the functions iowriteprep and iowrite in the Linux operating system’s iouring/iouring.c kernel are related to improper resource locking. Exploiting these vulnerabilities can allow an attacker to cause service failures...
The vulnerability of the io_register_iowq_max_workers() function in the io_uring/io_uring.c module, an interface for asynchronous input/output in the Linux kernel, allows a attacker to trigger a service failure.
The vulnerability of the ioregisteriowqmaxworkers function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux 6.4 io_uring Use-After-Free
iouring in Linux 6.4 suffers from a iouring page use-after-free condition via buffer ring mmap. Since commit c56e022c0a27 "iouring: add support for user mapped provided buffer ring", landed in Linux 6.4, iouring makes it possible to allocate, mmap, and deallocate "buffer rings". A "buffer ring" c...
The vulnerability of the io_sq_thread() function in the io_uring/sqpoll.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iosqthread function in the iouring/sqpoll.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux 5.6 Cred Refcount Overflow
Linux 5.6 suffers from a cred refcount overflow at approximately 39 gigs of memory usage via iouring. see also my related prior bug reports about overflowing refcounts with lots of RAM usage: https://crbug.com/project-zero/809: BPF program refcount, with 32GiB RAM...
The vulnerability of the io_clone_buffers() function in the io_uring/rsrc.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to cause a service failure.
The vulnerability of the ioclonebuffers function in the iouring/rsrc.c module of the Linux kernel’s asynchronous input/output interface is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
Linux io_uring Out-Of-Bounds Access
iouaddrmap in iouring handles multi-page region dangerously in a way that may allow for out-of-bounds access. iouaddrmap wants to import a region from userspace, and then address the imported region through the linear mapping area. This requires that the imported region is physically contiguous. ...
SUSE CVE-2025-21863
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
AZL-58563 CVE-2025-21863 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
CVE-2025-21863
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
AZL-58547 CVE-2025-21863 affecting package kernel for versions less than 6.6.82.1-1
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
DEBIAN-CVE-2025-21863
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
UBUNTU-CVE-2025-21863
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
CVE-2025-21863 io_uring: prevent opcode speculation
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
CVE-2025-21863
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
CVE-2025-21863 io_uring: prevent opcode speculation
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
CVE-2025-21863 io_uring: prevent opcode speculation
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...
CVE-2025-21863
CVE-2025-21863 — Linux kernel io_uring opcode speculation : The vulnerability arises from the io_uring path where sqe->opcode is used for different tables, allowing speculative execution issues. The fix sanitises sqe->opcode to prevent speculation. Affected product: Linux kernel with io_uri...