NetSight
IP …
medium5.5

CVE-2024-35831

In the Linux kernel, the following vulnerability has been resolved: io_uring: Fix release of pinned pages when __io_uaddr_map fails Looking at the error path o…

Impact

In the Linux kernel, the following vulnerability has been resolved: io_uring: Fix release of pinned pages when __io_uaddr_map fails Looking at the error path of __io_uaddr_map, if we fail after pinning the pages for any reasons, ret will be set to -EINVAL and the error handler won't properly release the pinned pages. I didn't manage to trigger it without forcing a failure, but it can happen in real life when memory is heavily fragmented.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.5.7 before 6.6
from 6.6.1 before 6.6.23
from 6.7 before 6.7.11
from 6.8 before 6.8.2
Version 6.6

Weakness classification

CWE-401

References