Linux kernel io_uring waitid cancel reference wrap
A flaw in the Linux kernel can make programs misbehave.
Summary
A flaw in the Linux kernel's io_uring waitid code lets repeated cancel attempts wrap a reference counter, so a request can complete twice. Linux kernels from 6.7 are affected, and each stable branch has a fixed release.
What to do
Update to the fixed kernel for your branch: 6.12.115, 6.18.60, 7.2.14, or 7.3.1 or later.
Update to at least the version for your product:
- Linux 6.12 6.12.115 or later
- Linux 6.18 6.18.60 or later
- Linux 7.2 7.2.14 or later
- Linux 7.3 7.3.1 or later
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen