Linux Kernel io_uring Buffer Length Read Vulnerability

A vulnerability in the Linux kernel's io_uring implementation has been addressed. The issue involved improper handling of buffer lengths mapped from userspace, which could lead to inconsistent reads. The vulnerability required ensuring that the buffer length was read safely and stably to prevent changes during processing. Additionally, the mechanism for committing buffers in the ring could overlook zero-sized buffers, halting progress. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could lead to incorrect handling of io_uring buffer lengths, potentially causing issues in buffer management and processing.