Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-40216

io_uring/rsrc: don't rely on user vaddr alignment

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a8edbb424b1391b077407c75d8f5d2ede77aa70d to < 50998b0ae7d9d552e96d8b7239981cf05f65eff5affected
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d to < f16769241594be59387b56ab525e327f54377e60affected
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d to < 3a3c6d61577dbb23c09df3e21f6f9eda1ecd634baffected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.36 to ≤ 6.12.*unaffected
  • 6.15.5 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References