In the Linux kernel, the following vulnerability has been resolved:
io_uring/sqpoll: work around a potential audit memory leak
kmemleak complains that there's a memory leak related to connect handling:
unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleak_alloc+0x30/0x38 [<000000009c30bb45>] kmalloc_trace+0x228/0x358 [<000000009da9d39f>] __audit_sockaddr+0xd0/0x138 [<0000000089a93e34>] move_addr_to_kernel+0x1a0/0x1f8 [<000000000b4e80e6>] io_connect_prep+0x1ec/0x2d4 [<00000000abfbcd99>] io_submit_sqes+0x588/0x1e48 [<00000000e7c25e07>] io_sq_thread+0x8a4/0x10e4 [<00000000d999b491>] ret_from_fork+0x10/0x20
which can can happen if:
1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audit_uring_entry() and audit_uring_exit().
Work around this by issuing a blanket NOP operation before the SQPOLL does anything.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfo | Jun 11, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-aws | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub