In the Linux kernel, the following vulnerability has been resolved:
io_uring/net: ensure vectored buffer node import is tied to notification
When support for vectored registered buffers was added, the import itself is using 'req' rather than the notification io_kiocb, sr->notif. For non-vectored imports, sr->notif is correctly used. This is important as the lifetime of the two may be different. Use the correct io_kiocb for the vectored buffer import.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-generic-6.17Upgrade linux-image-azureUpgrade linux-image-azure-6.17Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1010-azureUpgrade linux-image-oem-6.17Upgrade linux-image-raspiUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-6.17.0-19-genericUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-awsUpgrade linux-image-gcp-6.17Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-6.17Upgrade linux-image-oem-24.04dUpgrade linux-image-oracleUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-6.17Upgrade linux-image-generic-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-virtual-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-generic | Mar 17, 2026 | Dec 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub