In the Linux kernel, the following vulnerability has been resolved:
io_uring/zcrx: fix user_struct uaf
io_free_rbuf_ring() usees a struct user_struct, which io_zcrx_ifq_free() puts it down before destroying the ring.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-aws-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-gcp-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-realtimeUpgrade linux-image-oem-26.04Upgrade linux-image-azureUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-raspiUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-genericUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-7.0Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-ibmUpgrade linux-image-generic-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1008-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-azure-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-oracle-64k | Jul 1, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub