Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-40364

io_uring: fix io_req_prep_async with provided buffers

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffers io_req_prep_async() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c7fb19428d67dd0a2a78a4f237af01d39c78dc5a to < 233b210a678bddf8b49b02a070074a52b87e6d43affected
  • c7fb19428d67dd0a2a78a4f237af01d39c78dc5a to < a1b17713b32c75a90132ea2f92b1257f3bbc20f3affected
  • c7fb19428d67dd0a2a78a4f237af01d39c78dc5a to < b86f1d51731e621e83305dc9564ae14c9ef752bfaffected
  • c7fb19428d67dd0a2a78a4f237af01d39c78dc5a to < a94592ec30ff67dc36c424327f1e0a9ceeeb9bd3affected
  • c7fb19428d67dd0a2a78a4f237af01d39c78dc5a to < 35ae7910c349fb3c60439992e2e0e79061e95382affected
  • c7fb19428d67dd0a2a78a4f237af01d39c78dc5a to < f0ef94553868d07c1b14d7743a7e2553e5a831a3affected
  • c7fb19428d67dd0a2a78a4f237af01d39c78dc5a to < d63b0e8a628e62ca85a0f7915230186bb92f8bb4affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.78 to ≤ 6.6.*unaffected
  • 6.12.14 to ≤ 6.12.*unaffected
  • 6.13.3 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References