In the Linux kernel, the following vulnerability has been resolved:
io_uring/kbuf: check if target buffer list is still legacy on recycle
There's a gap between when the buffer was grabbed and when it potentially gets recycled, where if the list is empty, someone could've upgraded it to a ring provided type. This can happen if the request is forced via io-wq. The legacy recycling is missing checking if the buffer_list still exists, and if it's of the correct type. Add those checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 10, 2026 | May 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 8, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-xilinxUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gke-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-22.04 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub