In the Linux kernel, the following vulnerability has been resolved:
io_uring/sqpoll: work around a potential audit memory leak
kmemleak complains that there's a memory leak related to connect handling:
unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleak_alloc+0x30/0x38 [<000000009c30bb45>] kmalloc_trace+0x228/0x358 [<000000009da9d39f>] __audit_sockaddr+0xd0/0x138 [<0000000089a93e34>] move_addr_to_kernel+0x1a0/0x1f8 [<000000000b4e80e6>] io_connect_prep+0x1ec/0x2d4 [<00000000abfbcd99>] io_submit_sqes+0x588/0x1e48 [<00000000e7c25e07>] io_sq_thread+0x8a4/0x10e4 [<00000000d999b491>] ret_from_fork+0x10/0x20
which can can happen if:
1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audit_uring_entry() and audit_uring_exit().
Work around this by issuing a blanket NOP operation before the SQPOLL does anything.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.96-102.177Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-devel | Jun 11, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04d | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub