Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's io_uring component for zero-copy receive operations has been addressed. The issue involved a memory leak where pages were not properly freed after a failure in initializing scatter-gather (sg) data. This leak occurred in versions of the Linux kernel prior to the fix.
The vulnerability could lead to a memory leak, causing increased memory usage and potential exhaustion of available memory resources.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The specific commit that resolves the issue is available in the Linux kernel stable tree.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.