CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb
In the Linux kernel, the following vulnerability has been resolved:
iouring: fix incorrect iokiocb reference in iolinkskb
In iolinkskb function, there is a bug where prevnotif is incorrectly assigned using 'nd' instead of 'prevnd'. This causes the context validation check to compare the current notification with itself instead of comparing it with the previous notification.
Fix by using the correct prevnd parameter when obtaining prevnotif.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39963?
CVE-2025-39963 has been classified as a moderate severity vulnerability.
How do I fix CVE-2025-39963?
To fix CVE-2025-39963, you should upgrade to the latest version of the Linux Kernel that includes the patch for this vulnerability.
What systems are affected by CVE-2025-39963?
CVE-2025-39963 affects systems running vulnerable versions of the Linux Kernel.
What is the impact of CVE-2025-39963?
The impact of CVE-2025-39963 can lead to improper context validation, potentially allowing unauthorized access or manipulation.
Is there a workaround for CVE-2025-39963?
There is no known workaround for CVE-2025-39963; the best approach is to apply the patch by updating the kernel.