CVE-2025-40364: io_uring: fix io_req_prep_async with provided buffers
In the Linux kernel, the following vulnerability has been resolved:
iouring: fix ioreqprepasync with provided buffers
ioreqprepasync() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40364?
CVE-2025-40364 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-40364?
To fix CVE-2025-40364, update your Linux kernel to the latest stable version that contains the fix.
What are the potential impacts of CVE-2025-40364?
The potential impacts of CVE-2025-40364 include stability issues with asynchronous I/O operations in the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2025-40364?
CVE-2025-40364 affects multiple versions of the Linux kernel prior to the fix being applied.
Is there a workaround for CVE-2025-40364 if I cannot update?
A temporary workaround for CVE-2025-40364 may involve avoiding the use of io_uring features until the kernel can be updated.