In the Linux kernel, the following vulnerability has been resolved:
io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths
Since the buffers are mapped from userspace, it is prudent to use READ_ONCE() to read the value into a local variable, and use that for any other actions taken. Having a stable read of the buffer length avoids worrying about it changing after checking, or being read multiple times.
Similarly, the buffer may well change in between it being picked and being committed. Ensure the looping for incremental ring buffer commit stops if it hits a zero sized buffer, as no further progress can be made at that point.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade perf6.12Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade kernel-livepatch-6.12.53-69.119Upgrade kernel6.12-libbpf-static | Oct 28, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-rtUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-default-base | Dec 5, 2025 | Oct 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub