Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21863

io_uring: prevent opcode speculation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables, make sure we santitise it against speculations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d3656344fea0339fb0365c8df4d2beba4e0089cd to < 87e9eef43c758da267f6332678058a79764c7ebaaffected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to < 18eae8420081ef8e043ad455937bfb470ef08607affected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to < d261ead565a080e3411b0dd04e6d58a52471cac8affected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to < b9826e3b26ec031e9063f64a7c735449c43955e4affected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to < 506b9b5e8c2d2a411ea8fe361333f5081c56d23aaffected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to < fdbfd52bd8b85ed6783365ff54c82ab7067bd61baffected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to < 1e988c3fe1264708f4f92109203ac5b1d65de50baffected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.80 to ≤ 6.6.*unaffected
  • 6.12.17 to ≤ 6.12.*unaffected
  • 6.13.5 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References