In the Linux kernel, the following vulnerability has been resolved:
io_uring/zcrx: fix sgtable leak on mapping failures
In an unlikely case when io_populate_area_dma() fails, which could only happen on a PAGE_POOL_32BIT_ARCH_WITH_64BIT_DMA machine, io_zcrx_map_area() will have an initialised and not freed table. It was supposed to be cleaned up in the error path, but !is_mapped prevents that.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-headersUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-modules-extraUpgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.18-toolsUpgrade kernel6.18-libbpfUpgrade kernel6.18-tools-develUpgrade kernel6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel-livepatch-6.18.16-18.222Upgrade kernel6.18-libbpf-develUpgrade kernel6.18-libbpf-debuginfoUpgrade perf6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade perf6.18-debuginfoUpgrade bpftool6.18 | May 19, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub