In the Linux kernel, the following vulnerability has been resolved:
io_uring/net: ensure vectored buffer node import is tied to notification
When support for vectored registered buffers was added, the import itself is using 'req' rather than the notification io_kiocb, sr->notif. For non-vectored imports, sr->notif is correctly used. This is important as the lifetime of the two may be different. Use the correct io_kiocb for the vectored buffer import.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-aws-6.17Upgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-realtime-6.17Upgrade linux-image-raspi-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-virtual-6.17Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-generic-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-azureUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1010-azureUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-awsUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-oem-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-19-generic | Mar 17, 2026 | Dec 16, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub