Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38002

io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() Not everything requires locking in there, which is why the 'has_lock' variable exists. But enough does that it's a bit unwieldy to manage. Wrap the whole thing in a ->uring_lock trylock, and just return with no output if we fail to grab it. The existing trylock() will already have greatly diminished utility/output for the failure case. This fixes an issue with reading the SQE fields, if the ring is being actively resized at the same time.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 79cfe9e59c2a12c3b3faeeefe38d23f3d8030972 to < bdb7d2ec2e31c46c45d1f32667dfa8216a72705eaffected
  • 79cfe9e59c2a12c3b3faeeefe38d23f3d8030972 to < d871198ee431d90f5308d53998c1ba1d5db5619aaffected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.14.8 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References