CVE-2026-23263: io_uring/zcrx: fix page array leak
In the Linux kernel, the following vulnerability has been resolved:
iouring/zcrx: fix page array leak
d9f595b9a65e ("iouring/zcrx: fix leaking pages on sg init fail") fixed a page leakage but didn't free the page array, release it as well.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23263?
CVE-2026-23263 is classified as a medium-severity vulnerability that may lead to resource leakage in the Linux kernel.
How do I fix CVE-2026-23263?
To fix CVE-2026-23263, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
What does CVE-2026-23263 affect?
CVE-2026-23263 affects the Linux kernel, specifically the io_uring subsystem related to page array handling.
What is the main issue described in CVE-2026-23263?
CVE-2026-23263 describes a page array leak that occurs if the sg initialization fails in the io_uring subsystem.
Is CVE-2026-23263 a remote vulnerability?
No, CVE-2026-23263 is not classified as a remote vulnerability but can cause local resource issues within the affected system.