Patch Ticker

Linux kernel: several flaws in io_uring, Bluetooth L2CAP, Hyper-V and PID namespaces

A core part of the Linux operating system has flaws that can stall or open systems.

Summary

Several flaws in the Linux kernel's io_uring waitid, Bluetooth L2CAP, Hyper-V and PID namespace code affect Linux systems that use those features. They can corrupt memory or stall the system.

Affected when

  • io_uring waitid operations in use
  • Bluetooth L2CAP in use
  • Hyper-V VTL2 or SEV-SNP CoCo VM environment
  • PID namespace reaper in use (while a livepatch is applied)

What to do

Update the 6.12 branch to 6.12.115 or later, and the 6.18 branch to 6.18.60 or later. For other branches, check the version lists in each CVE record and install your distribution's kernel update.

Products and platforms

  • Linux

CVE IDs

Times

First published

First seen