Riskcovery

CVE-2025-21863

io_uring: prevent opcode speculation

State
Published
Severity
7.8 High
Published
Mar 12, 2025
Updated
Oct 15, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring: prevent opcode speculation

sqe->opcode is used for different tables, make sure we santitise it against speculations.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to before 87e9eef43c758da267f6332678058a79764c7ebaAffected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to before 18eae8420081ef8e043ad455937bfb470ef08607Affected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to before d261ead565a080e3411b0dd04e6d58a52471cac8Affected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to before b9826e3b26ec031e9063f64a7c735449c43955e4Affected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to before 506b9b5e8c2d2a411ea8fe361333f5081c56d23aAffected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to before fdbfd52bd8b85ed6783365ff54c82ab7067bd61bAffected
  • d3656344fea0339fb0365c8df4d2beba4e0089cd to before 1e988c3fe1264708f4f92109203ac5b1d65de50bAffected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 5.10.259 through 5.10.*Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.80 through 6.6.*Not affected
  • 6.12.17 through 6.12.*Not affected
  • 6.13.5 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.