Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's io_uring zero-copy receive implementation, specifically related to the handling of page pool destruction. When multiple page pools are in use, allocated niovs (network I/O vectors) may not be properly returned during the destruction of a page pool, leading to potential inconsistencies. This issue arises from a misplaced warning that incorrectly checks whether all niovs have been returned to the zero-copy receive component before the page pool is destroyed. The warning has been removed in the latest patch.
The vulnerability could lead to warnings during the destruction of page pools, indicating that not all allocated niovs have been returned, which could cause inconsistencies in memory management.
Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.