Linux Kernel io_uring User Pointer Alignment Vulnerability

A vulnerability in the Linux kernel's io_uring resource management has been addressed. The issue arose because user pointers do not guarantee proper alignment, yet the kernel's handling of these pointers after coalescing multi-hugepage buffers relied on a flawed bit masking method. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could lead to incorrect buffer handling in io_uring, potentially causing resource management issues or memory-related errors.

Reproduction

The vulnerability can be reproduced by registering a buffer with user pointers that are not properly aligned. This can be done by using io_uring's buffer coalescing feature with multi-hugepage buffers, which may expose the misalignment issue during the coalescing process.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been fixed.