In the Linux kernel, the following vulnerability has been resolved:
io_uring/net: fix io_req_post_cqe abuse by send bundle
[ 114.987980][ T5313] WARNING: CPU: 6 PID: 5313 at io_uring/io_uring.c:872 io_req_post_cqe+0x12e/0x4f0 [ 114.991597][ T5313] RIP: 0010:io_req_post_cqe+0x12e/0x4f0 [ 115.001880][ T5313] Call Trace: [ 115.002222][ T5313] <TASK> [ 115.007813][ T5313] io_send+0x4fe/0x10f0 [ 115.009317][ T5313] io_issue_sqe+0x1a6/0x1740 [ 115.012094][ T5313] io_wq_submit_work+0x38b/0xed0 [ 115.013223][ T5313] io_worker_handle_work+0x62a/0x1600 [ 115.013876][ T5313] io_wq_worker+0x34f/0xdf0
As the comment states, io_req_post_cqe() should only be used by multishot requests, i.e. REQ_F_APOLL_MULTISHOT, which bundled sends are not. Add a flag signifying whether a request wants to post multiple CQEs. Eventually REQ_F_APOLL_MULTISHOT should imply the new flag, but that's left out for simplicity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64 | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-azure-devel | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-aws-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-realtimeUpgrade linux-image-gcp-64k | Jun 26, 2025 | May 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub