Количество 5
Количество 5

CVE-2025-21686
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-21686
[REJECTED CVE] In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: require cloned buffers to share accounting contexts

CVE-2025-21686
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
GHSA-28mc-jvx2-g85v
In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: require cloned buffers to share accounting contexts When IORING_REGISTER_CLONE_BUFFERS is used to clone buffers from uring instance A to uring instance B, where A and B use different MMs for accounting, the accounting can go wrong: If uring instance A is closed before uring instance B, the pinned memory counters for uring instance B will be decremented, even though the pinned memory was originally accounted through uring instance A; so the MM of uring instance B can end up with negative locked memory.

BDU:2025-02808
Уязвимость функции io_clone_buffers() модуля io_uring/rsrc.c интерфейса асинхронного ввода/вывода ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2025-21686 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 6 месяцев назад | ||
![]() | CVE-2025-21686 [REJECTED CVE] In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: require cloned buffers to share accounting contexts | CVSS3: 5.5 | 6 месяцев назад | |
![]() | CVE-2025-21686 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 6 месяцев назад | ||
GHSA-28mc-jvx2-g85v In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: require cloned buffers to share accounting contexts When IORING_REGISTER_CLONE_BUFFERS is used to clone buffers from uring instance A to uring instance B, where A and B use different MMs for accounting, the accounting can go wrong: If uring instance A is closed before uring instance B, the pinned memory counters for uring instance B will be decremented, even though the pinned memory was originally accounted through uring instance A; so the MM of uring instance B can end up with negative locked memory. | 6 месяцев назад | |||
![]() | BDU:2025-02808 Уязвимость функции io_clone_buffers() модуля io_uring/rsrc.c интерфейса асинхронного ввода/вывода ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании. | CVSS3: 5.5 | 7 месяцев назад |
Уязвимостей на страницу