In the Linux kernel, the following vulnerability has been resolved:
io_uring/zcrx: fix sgtable leak on mapping failures
In an unlikely case when io_populate_area_dma() fails, which could only happen on a PAGE_POOL_32BIT_ARCH_WITH_64BIT_DMA machine, io_zcrx_map_area() will have an initialised and not freed table. It was supposed to be cleaned up in the error path, but !is_mapped prevents that.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-libbpfUpgrade python3-perf6.18Upgrade kernel6.18-tools-develUpgrade kernel6.18-headersUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfoUpgrade kernel6.18-develUpgrade python3-perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-toolsUpgrade bpftool6.18Upgrade kernel6.18-modules-extra-commonUpgrade perf6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-libbpf-develUpgrade kernel-livepatch-6.18.16-18.222Upgrade perf6.18-debuginfoUpgrade kernel6.18 | May 19, 2026 | May 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub