CVE-2025-21836
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
07/03/2025
Last modified:
07/03/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
io_uring/kbuf: reallocate buf lists on upgrade<br />
<br />
IORING_REGISTER_PBUF_RING can reuse an old struct io_buffer_list if it<br />
was created for legacy selected buffer and has been emptied. It violates<br />
the requirement that most of the field should stay stable after publish.<br />
Always reallocate it instead.