CVE-2025-38002
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/06/2025
Last modified:
26/06/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo()<br />
<br />
Not everything requires locking in there, which is why the &#39;has_lock&#39;<br />
variable exists. But enough does that it&#39;s a bit unwieldy to manage.<br />
Wrap the whole thing in a ->uring_lock trylock, and just return<br />
with no output if we fail to grab it. The existing trylock() will<br />
already have greatly diminished utility/output for the failure case.<br />
<br />
This fixes an issue with reading the SQE fields, if the ring is being<br />
actively resized at the same time.