Riskcovery

CVE-2024-50060

io_uring: check if we need to reschedule during overflow flush

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring: check if we need to reschedule during overflow flush

In terms of normal application usage, this list will always be empty. And if an application does overflow a bit, it'll have a few entries. However, nothing obviously prevents syzbot from running a test case that generates a ton of overflow entries, and then flushing them can take quite a while.

Check for needing to reschedule while flushing, and drop our locks and do so if necessary. There's no state to maintain here as overflows always prune from head-of-list, hence it's fine to drop and reacquire the locks at the end of the loop.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to before a2493904e95ce94bbec819d8f7f03b99976eb25cAffected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to before f4ce3b5d26ce149e77e6b8e8f2058aa80e5b034eAffected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to before c2eadeafce2d385b3f6d26a7f31fee5aba2bbbb0Affected
  • 2b188cc1bb857a9d4701ae59aa7768b5124e262e to before eac2ca2d682f94f46b1973bdf5e77d85d77b8e53Affected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.57 through 6.6.*Not affected
  • 6.11.4 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.