CVE-2025-40364

io_uring: fix io_req_prep_async with provided buffers

published April 18, 2025

CVSS
—
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

io_uring: fix io_req_prep_async with provided buffers

io_req_prep_async() can import provided buffers, commit the ring state

by giving up on that before, it'll be reimported later if needed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.8th percentile
Published
2025-04-18T13:50Z
EPSS history
Timeline
  • 18 APR 13:50Z
    io_uring: fix io_req_prep_async with provided buffers
    cvelistv5