CVE-2025-38002

io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()

published June 6, 2025

CVSS
—
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()

Not everything requires locking in there, which is why the 'has_lock'

variable exists. But enough does that it's a bit unwieldy to manage.

Wrap the whole thing in a ->uring_lock trylock, and just return

with no output if we fail to grab it. The existing trylock() will

already have greatly diminished utility/output for the failure case.

This fixes an issue with reading the SQE fields, if the ring is being

actively resized at the same time.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Published
2025-06-06T13:43Z
EPSS history
Timeline
  • 06 JUN 13:43Z
    io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()
    cvelistv5