Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-68317

io_uring/zctx: check chained notif contexts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same context. There are some ambiguous syz reports, so let's check the assumption on notification completion.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6fe4220912d19152a26ce19713ab232f4263018d to < aaafd17d3f4be2c15539359a5b4bfa00237f687faffected
  • 6fe4220912d19152a26ce19713ab232f4263018d to < d664a3ce3a604231a0b144c152a3755d03b18b60affected
  • 6fe4220912d19152a26ce19713ab232f4263018d to < ab3ea6eac5f45669b091309f592c4ea324003053affected

Linux Linux

Default version status: affected

  • 6.10affected
  • 0 to < 6.10unaffected
  • 6.12.58 to ≤ 6.12.*unaffected
  • 6.17.8 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References