In the Linux kernel, the following vulnerability has been resolved:
io_uring: check for overflows in io_pin_pages
WARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144 CPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0 Call Trace: <TASK> __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183 io_rings_map io_uring/io_uring.c:2611 [inline] io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470 io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692 io_uring_setup io_uring/io_uring.c:3781 [inline] ... </TASK>
io_pin_pages()'s uaddr parameter came directly from the user and can be garbage. Don't just add size to it as it can overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Apr 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Mar 19, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Apr 1, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle | Feb 20, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub