8 matches found
SUSE CVE-2026-64426
In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...
UBUNTU-CVE-2026-64426
In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...
CVE-2026-64426 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...
CVE-2026-64426 io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...
EUVD-2026-48770
In the Linux kernel, the following vulnerability has been resolved: iouring/nop: fix file reference leak with IOSQEFIXEDFILE NOP file-acquisition support choses between a fixed registered file and a normal fget'd file based on its own IORINGNOPFIXEDFILE flag in sqe-nopflags. However, a request's...
CVE-2026-64426
A file reference leak in the Linux kernel's io_uring/nop component occurs when a NOP request is submitted with IOSQE_FIXED_FILE set but without IORING_NOP_FIXED_FILE . The io_nop() handler takes the normal file-acquisition path and grabs a real file reference via io_file_get_normal() , but on com...
kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time
A flaw was found in the Linux kernel. A local user could exploit this flaw to cause data corruption by reusing a submission queue entry SQE before the corresponding command completes. This issue occurs because the iouring command handler accesses data from the original entry after the preparation...
kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time
A flaw was found in the Linux kernel. A local user could exploit this flaw to cause data corruption by reusing a submission queue entry SQE before the corresponding command completes. This issue occurs because the iouring command handler accesses data from the original entry after the preparation...