In the Linux kernel, the following vulnerability has been resolved:
io_uring/sqpoll: work around a potential audit memory leak
kmemleak complains that there's a memory leak related to connect handling:
unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleak_alloc+0x30/0x38 [<000000009c30bb45>] kmalloc_trace+0x228/0x358 [<000000009da9d39f>] __audit_sockaddr+0xd0/0x138 [<0000000089a93e34>] move_addr_to_kernel+0x1a0/0x1f8 [<000000000b4e80e6>] io_connect_prep+0x1ec/0x2d4 [<00000000abfbcd99>] io_submit_sqes+0x588/0x1e48 [<00000000e7c25e07>] io_sq_thread+0x8a4/0x10e4 [<00000000d999b491>] ret_from_fork+0x10/0x20
which can can happen if:
1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audit_uring_entry() and audit_uring_exit().
Work around this by issuing a blanket NOP operation before the SQPOLL does anything.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools | Jun 11, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-optionalUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04 | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub