Описание
In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables, make sure we santitise it against speculations.
Отчет
This vulnerability is rated with a Moderate severity because exploitation is restricted to authenticated local users who can submit crafted io_uring requests, allowing potential speculative side-channel observation of kernel memory. Because this issue involves speculative execution (Spectre-style bounds check bypass) rather than direct memory corruption or remote execution, it cannot be leveraged directly for unauthorized modification or system disruption. Earlier enterprise releases such as Red Hat Enterprise Linux 8 do not incorporate the affected opcode indexing logic and remain unaffected.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Affected | ||
| Red Hat Enterprise Linux 10 | kernel | Fixed | RHSA-2025:20095 | 11.11.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:20518 | 11.11.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:20518 | 11.11.2025 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | kernel | Fixed | RHSA-2026:1703 | 02.02.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables, make sure we santitise it against speculations.
In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables, make sure we santitise it against speculations.
In the Linux kernel, the following vulnerability has been resolved: i ...
In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables, make sure we santitise it against speculations.
EPSS
7.1 High
CVSS3