CVE-2021-47040

io_uring: fix overflows checks in provide buffers

State: Published
Severity: 7.8 High
Published: Feb 28, 2024
Updated: Aug 5, 2026
Reserved: Feb 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring: fix overflows checks in provide buffers

Colin reported before possible overflow and sign extension problems in io_provide_buffers_prep(). As Linus pointed out previous attempt did nothing useful, see d81269fecb8ce ("io_uring: fix provide_buffers sign extension").

Do that with help of check_<op>_overflow helpers. And fix struct io_provide_buf::len type, as it doesn't make much sense to keep it signed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	efe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to before cbbc13b115b8f18e0a714d89f87fbdc499acfe2dAffected efe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to before 51bf90901952aaac564bbdb36b2b503050c53dd9Affected efe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to before 84b8c266c4bfe9ed5128e13253c388deb74b1b03Affected efe68c1ca8f49e8c06afd74b699411bfbb8ba1ff to before 38134ada0ceea3e848fe993263c0ff6207fd46e7Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.37 through 5.10.Not affected 5.11.21 through 5.11.Not affected 5.12.4 through 5.12.*Not affected 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.