Linux Kernel io_uring Zero-Copy Receive Page Pool Destruction Warning Removal Vulnerability

Vulnerability

A vulnerability exists in the Linux kernel's io_uring zero-copy receive implementation, specifically related to the handling of page pool destruction. When multiple page pools are in use, allocated niovs (network I/O vectors) may not be properly returned during the destruction of a page pool, leading to potential inconsistencies. This issue arises from a misplaced warning that incorrectly checks whether all niovs have been returned to the zero-copy receive component before the page pool is destroyed. The warning has been removed in the latest patch.

Impact

The vulnerability could lead to warnings during the destruction of page pools, indicating that not all allocated niovs have been returned, which could cause inconsistencies in memory management.

Remediation

Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.

Added: Aug 16, 2025, 11:34 AM
Updated: Aug 16, 2025, 11:34 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.