In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.145-95.156Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.205-195.804Upgrade python-perfUpgrade bpftool | Aug 28, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-preemptUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-rtUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-docs-html | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub