Riskcovery

CVE-2024-35831

io_uring: Fix release of pinned pages when __io_uaddr_map fails

State
Published
Severity
Not scored
Published
May 17, 2024
Updated
May 23, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring: Fix release of pinned pages when __io_uaddr_map fails

Looking at the error path of __io_uaddr_map, if we fail after pinning the pages for any reasons, ret will be set to -EINVAL and the error handler won't properly release the pinned pages.

I didn't manage to trigger it without forcing a failure, but it can happen in real life when memory is heavily fragmented.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 223ef474316466e9f61f6e0064f3a6fe4923a2c5 to before 0b6f39c175ba5f0ef72bdb3b9d2a06ad78621d62Affected
  • 223ef474316466e9f61f6e0064f3a6fe4923a2c5 to before 712e2c8415f55a4a4ddaa98a430b87f624109f69Affected
  • 223ef474316466e9f61f6e0064f3a6fe4923a2c5 to before 4d376d7ad62b6a8e8dfff56b559d9d275e5b9b3aAffected
  • 223ef474316466e9f61f6e0064f3a6fe4923a2c5 to before 67d1189d1095d471ed7fa426c7e384a7140a5dd7Affected
  • 3f3164ce6396138747984ee9e61158e248246300Affected
  • 6.5.7 to before 6.6Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.