Riskcovery

CVE-2026-45995

io_uring/zcrx: fix user_struct uaf

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/zcrx: fix user_struct uaf

io_free_rbuf_ring() usees a struct user_struct, which io_zcrx_ifq_free() puts it down before destroying the ring.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5c686456a4e83ef06c74d40be05c21a0ef136684 to before 9feb88eeda6d288f93fcfb6bca563f89e316479dAffected
  • 5c686456a4e83ef06c74d40be05c21a0ef136684 to before 0fcccfd87152f957fa8312b841f6efef42a05a20Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.