In the Linux kernel, the following vulnerability has been resolved:
io_uring/sqpoll: work around a potential audit memory leak
kmemleak complains that there's a memory leak related to connect handling:
unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleak_alloc+0x30/0x38 [<000000009c30bb45>] kmalloc_trace+0x228/0x358 [<000000009da9d39f>] __audit_sockaddr+0xd0/0x138 [<0000000089a93e34>] move_addr_to_kernel+0x1a0/0x1f8 [<000000000b4e80e6>] io_connect_prep+0x1ec/0x2d4 [<00000000abfbcd99>] io_submit_sqes+0x588/0x1e48 [<00000000e7c25e07>] io_sq_thread+0x8a4/0x10e4 [<00000000d999b491>] ret_from_fork+0x10/0x20
which can can happen if:
1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audit_uring_entry() and audit_uring_exit().
Work around this by issuing a blanket NOP operation before the SQPOLL does anything.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-headersUpgrade kernel | Jun 11, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04 | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub