Riskcovery

CVE-2025-40216

io_uring/rsrc: don't rely on user vaddr alignment

State
Published
Severity
7.8 High
Published
Dec 4, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/rsrc: don't rely on user vaddr alignment

There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of it.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d to before 50998b0ae7d9d552e96d8b7239981cf05f65eff5Affected
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d to before f16769241594be59387b56ab525e327f54377e60Affected
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d to before 3a3c6d61577dbb23c09df3e21f6f9eda1ecd634bAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.36 through 6.12.*Not affected
  • 6.15.5 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.