In the Linux kernel, the following vulnerability has been resolved:
io_uring: check for overflows in io_pin_pages
WARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144 CPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0 Call Trace: <TASK> __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183 io_rings_map io_uring/io_uring.c:2611 [inline] io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470 io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692 io_uring_setup io_uring/io_uring.c:3781 [inline] ... </TASK>
io_pin_pages()'s uaddr parameter came directly from the user and can be garbage. Don't just add size to it as it can overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Apr 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Mar 19, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Apr 1, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-5.4Upgrade linux-image-virtual-5.4Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1165-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-5.4Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-fips-5.4Upgrade linux-image-5.4.0-1170-azureUpgrade linux-image-virtualUpgrade linux-image-azure-fips-5.4Upgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-snapdragon-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-aws-5.4Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-242-lowlatencyUpgrade linux-image-azure-5.4Upgrade linux-image-5.4.0-1139-fipsUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-5.4Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.4.0-1165-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1163-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.4.0-1148-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.4.0-1168-gcpUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-aws-fips-5.4Upgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-5.4.0-1111-ibmUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-242-genericUpgrade linux-image-generic-5.4Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.4.0-242-generic-lpaeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-ibm-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-5.4.0-1170-azure-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-kvm-5.4Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oemUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.4.0-1083-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1069-iotUpgrade linux-image-raspi-5.4Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1168-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1152-kvmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-gkeop | Feb 20, 2025 | Dec 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub