Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's io_uring implementation has been addressed, concerning leaks of multishot accept requests. When the REQ_F_POLLED flag is set, it does not ensure that the request is processed as multishot in the polling path. This discrepancy can lead to unintentional request leaks, as the system may incorrectly assume a multishot issue and request to skip completion, causing the request to be lost. The vulnerability has been fixed by using issue_flags to properly mark multipoll-related concerns.
The vulnerability could lead to a leak of accept requests, causing them to be lost and not properly completed, which could disrupt normal operations that rely on these requests being processed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.