CVE-2023-54041

io_uring: fix memory leak when removing provided buffers

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

io_uring: fix memory leak when removing provided buffers

When removing provided buffers, io_buffer structs are not being disposed

of, leading to a memory leak. They can't be freed individually, because

they are allocated in page-sized groups. They need to be added to some

free list instead, such as io_buffers_cache. All callers already hold

the lock protecting it, apart from when destroying buffers, so had to

extend the lock there.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.4th percentile
Published
2025-12-24T10:56Z
EPSS history
Timeline
  • 24 DEC 10:56Z
    io_uring: fix memory leak when removing provided buffers
    cvelistv5