In the Linux kernel, the following vulnerability has been resolved:
io_uring/sqpoll: work around a potential audit memory leak
kmemleak complains that there's a memory leak related to connect handling:
unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleak_alloc+0x30/0x38 [<000000009c30bb45>] kmalloc_trace+0x228/0x358 [<000000009da9d39f>] __audit_sockaddr+0xd0/0x138 [<0000000089a93e34>] move_addr_to_kernel+0x1a0/0x1f8 [<000000000b4e80e6>] io_connect_prep+0x1ec/0x2d4 [<00000000abfbcd99>] io_submit_sqes+0x588/0x1e48 [<00000000e7c25e07>] io_sq_thread+0x8a4/0x10e4 [<00000000d999b491>] ret_from_fork+0x10/0x20
which can can happen if:
1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audit_uring_entry() and audit_uring_exit().
Work around this by issuing a blanket NOP operation before the SQPOLL does anything.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-debuginfo | Jun 11, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanilla | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1013-nvidia-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub