CVE-2025-40364

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffers io_req_prep_async() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed.

Reserved 2025-04-16 | Published 2025-04-18 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

c7fb19428d67dd0a2a78a4f237af01d39c78dc5a before a1b17713b32c75a90132ea2f92b1257f3bbc20f3
affected

c7fb19428d67dd0a2a78a4f237af01d39c78dc5a before a94592ec30ff67dc36c424327f1e0a9ceeeb9bd3
affected

Default status
affected

5.19
affected

Any version before 5.19
unaffected

6.1.129
unaffected

6.6.78
unaffected

References

git.kernel.org/...c/a1b17713b32c75a90132ea2f92b1257f3bbc20f3

git.kernel.org/...c/a94592ec30ff67dc36c424327f1e0a9ceeeb9bd3

cve.org (CVE-2025-40364)

nvd.nist.gov (CVE-2025-40364)

Download JSON