2572 matches found
EUVD-2026-67448
In the Linux kernel, the following vulnerability has been resolved: iouring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. Once installed, they should not be dropped across exec. For a task that has used iouring, the exec cancellation path call...
CVE-2026-80713
CVE-2026-80713 is a Linux kernel vulnerability in the io_uring subsystem. The root cause is that per-task io_uring restrictions are incorrectly released during the exec cancellation path : the function __io_uring_free() frees both the task context and the per-task restriction, so any ring created...
PT-2026-83013
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the io uring subsystem where per-task restrictions are not preserved across an exec operation. When a task that has used io uring undergoes the exec cancellation path,...
The vulnerability in the io_uring/kbuf.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the iouring/kbuf.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-80713: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iouring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. Once installed, they should not be dropped across exec. For a task that has used iouring, the exec cancellation path call...
The vulnerability of the function io_register_resize_rings() in the io_uring/register.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ioregisterresizerings function in the iouring/register.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the io_poll_check_events() function in the io_uring/poll.c module of the Linux kernel’s asynchronous I/O interface allows a attacker to cause a service failure.
The vulnerability of the iopollcheckevents function in the iouring/poll.c module of the Linux kernel’s asynchronous I/O interface involves executing a loop with an unconditionally exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the io_worker_handle_work() function in the io_uring/io-wq.c module, a component of the Linux kernel’s asynchronous input/output interface, allows a attacker to cause a service failure.
The vulnerability of the ioworkerhandlework function in the iouring/io-wq.c module, which is part of the Linux kernel’s asynchronous input/output interface, is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: iouring/bpf-ops: Rejection of re-registration of an already-bound ops. The ioinstallbpf function only rejects a second registration on the ctx-bpfops side and unconditionally sets the per-map back-pointer ops-priv. The structops...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: dm: limiting the target BIOS polling to a single iteration. dmpollbio is the -pollbio callback for a stacked DM device. The caller only has knowledge of the DM queue; therefore, it may decide to perform a spinning poll if it...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: iouring/rw: Defer fsnotify calls to task context. We cannot defer these calls outside of the kiocb completion, as that might be off-soft/hard IRQ context. We should defer the calls until we process the taskwork for this reques...
ROS-20260821-73-0010
The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-74392
A flaw was found in the Linux kernel's device mapper dm component. When iouring with IOPOLL is used on a dm-stripe target, a task can enter a prolonged spinning poll loop. This can lead to an RCU Read-Copy Update CPU stall, causing a Denial of Service DoS for the affected system...
Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel
CVE-2026-53365 — VsockDrop:iouring + AFVSOCK: Improper refer...
Linux Distros Unpatched Vulnerability : CVE-2026-72112
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/bpf-ops: reject re- registration of an already-bound ops ioinstallbpf only rejects a...
CVE-2026-72112
A flaw was found in the Linux kernel's iouring/bpf-ops component. This vulnerability allows a local attacker with specific capabilities CAPBPF and CAPPERFMON to re-register an already-bound operation, leading to a use-after-free of freed executable memory. This could result in arbitrary code...
CVE-2026-74392
In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dmpollbio is the -pollbio callback for a stacked dm device. The caller only knows about the dm queue, so it may decide to do a spinning poll if it thinks a single queue is being polled...
CVE-2026-74392
In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dmpollbio is the -pollbio callback for a stacked dm device. The caller only knows about the dm queue, so it may decide to do a spinning poll if it thinks a single queue is being polled...
UBUNTU-CVE-2026-74392
In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dmpollbio is the -pollbio callback for a stacked dm device. The caller only knows about the dm queue, so it may decide to do a spinning poll if it thinks a single queue is being polled...
CVE-2026-72112
In the Linux kernel, the following vulnerability has been resolved: iouring/bpf-ops: reject re-registration of an already-bound ops ioinstallbpf only rejects a second registration on the ctx side ctx-bpfops and sets the per-map back-pointer ops-priv unconditionally. The structops link path never...