CVE-2025-21836

March 7, 2025, 9:15 a.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: reallocate buf lists on upgrade IORING_REGISTER_PBUF_RING can reuse an old struct io_buffer_list if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field should stay stable after publish. Always reallocate it instead.

Product(s) Impacted

Product Versions
Linux kernel
  • []

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/146a185f6c05ee263db715f860620606303c4633
https://git.kernel.org/stable/c/2a5febbef40ce968e295a7aeaa5d5cbd9e3e5ad4
https://git.kernel.org/stable/c/7d0dc28dae836caf7645fef62a10befc624dd17b
https://git.kernel.org/stable/c/8802766324e1f5d414a81ac43365c20142e85603

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-03-07
CVE-2025-21836

Timeline

Published: March 7, 2025, 9:15 a.m.
Last Modified: March 7, 2025, 9:15 a.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.