Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability has been identified in the Linux kernel's io_uring implementation, specifically in how bundled send requests are handled. The issue arises because the function io_req_post_cqe is misused with bundled sends, which do not support multishot requests. This misuse can lead to improper management of completion queue entries, potentially causing unexpected behavior in applications using io_uring for asynchronous I/O operations.
Exploitation of this vulnerability could lead to incorrect handling of I/O completion events, potentially causing applications to mismanage resources or data, especially in scenarios requiring precise I/O operation control.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.