In the Linux kernel, the following vulnerability has been resolved:
io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths
Since the buffers are mapped from userspace, it is prudent to use READ_ONCE() to read the value into a local variable, and use that for any other actions taken. Having a stable read of the buffer length avoids worrying about it changing after checking, or being read multiple times.
Similarly, the buffer may well change in between it being picked and being committed. Ensure the looping for incremental ring buffer commit stops if it hits a zero sized buffer, as no further progress can be made at that point.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.53-69.119Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-modules-extraUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12Upgrade perf6.12 | Oct 28, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-default-extra | Dec 5, 2025 | Oct 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub