In the Linux kernel, the following vulnerability has been resolved:
io_uring/sqpoll: work around a potential audit memory leak
kmemleak complains that there's a memory leak related to connect handling:
unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleak_alloc+0x30/0x38 [<000000009c30bb45>] kmalloc_trace+0x228/0x358 [<000000009da9d39f>] __audit_sockaddr+0xd0/0x138 [<0000000089a93e34>] move_addr_to_kernel+0x1a0/0x1f8 [<000000000b4e80e6>] io_connect_prep+0x1ec/0x2d4 [<00000000abfbcd99>] io_submit_sqes+0x588/0x1e48 [<00000000e7c25e07>] io_sq_thread+0x8a4/0x10e4 [<00000000d999b491>] ret_from_fork+0x10/0x20
which can can happen if:
1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audit_uring_entry() and audit_uring_exit().
Work around this by issuing a blanket NOP operation before the SQPOLL does anything.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64 | Jun 11, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-azure-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1012-ibm | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub