In the Linux kernel, the following vulnerability has been resolved:
io_uring/kbuf: hold io_buffer_list reference over mmap
If we look up the kbuf, ensure that it doesn't get unregistered until after we're done with it. Since we're inside mmap, we cannot safely use the io_uring lock. Rely on the fact that we can lookup the buffer list under RCU now and grab a reference to it, preventing it from being unregistered until we're done with it. The lookup returns the io_buffer_list directly with it referenced.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-rtUpgrade kernel-default-base-rebuild | Jul 23, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-raspi | Jul 12, 2024 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub