In the Linux kernel, the following vulnerability has been resolved:
io_uring: Fix release of pinned pages when __io_uaddr_map fails
Looking at the error path of __io_uaddr_map, if we fail after pinning the pages for any reasons, ret will be set to -EINVAL and the error handler won't properly release the pinned pages.
I didn't manage to trigger it without forcing a failure, but it can happen in real life when memory is heavily fragmented.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-obs-build | Jul 23, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm | Jul 1, 2024 | May 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub