CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade
In the Linux kernel, the following vulnerability has been resolved:
iouring/kbuf: reallocate buf lists on upgrade
IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field should stay stable after publish. Always reallocate it instead.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21836?
CVE-2025-21836 has been classified with a severity rating that indicates potential risks to system integrity and confidentiality.
What are the potential impacts of CVE-2025-21836?
CVE-2025-21836 could lead to memory corruption or unexpected behavior in the Linux kernel, affecting applications relying on io_uring functionality.
How do I fix CVE-2025-21836?
To remediate CVE-2025-21836, update your Linux kernel to the latest stable version that contains the patch addressing this vulnerability.
Is CVE-2025-21836 exploitable?
Yes, CVE-2025-21836 may be exploited by an attacker to manipulate or crash affected systems using vulnerable io_uring functions.
Which versions of the Linux kernel are affected by CVE-2025-21836?
CVE-2025-21836 affects all versions of the Linux kernel prior to the patch release where the vulnerability has been resolved.