Riskcovery

CVE-2025-68317

io_uring/zctx: check chained notif contexts

State
Published
Severity
7.8 High
Published
Dec 16, 2025
Updated
Oct 15, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/zctx: check chained notif contexts

Send zc only links ubuf_info for requests coming from the same context. There are some ambiguous syz reports, so let's check the assumption on notification completion.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6fe4220912d19152a26ce19713ab232f4263018d to before aaafd17d3f4be2c15539359a5b4bfa00237f687fAffected
  • 6fe4220912d19152a26ce19713ab232f4263018d to before d664a3ce3a604231a0b144c152a3755d03b18b60Affected
  • 6fe4220912d19152a26ce19713ab232f4263018d to before ab3ea6eac5f45669b091309f592c4ea324003053Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.58 through 6.12.*Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.