CVE-2026-45995: io_uring/zcrx: fix user_struct uaf

Q: What level of access does an attacker need to exploit this issue?

An attacker needs local access and low privileges. No user interaction is required.

Q: What security impact could successful exploitation have?

Successful exploitation could affect confidentiality, integrity, and availability at a high level, according to the supplied CVSS vector.

Q: Is a fix available?

Yes. A patch is available, with fixes referenced in the Linux stable kernel repository.

Published May 27, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

iouring/zcrx: fix userstruct uaf

iofreerbufring() usees a struct userstruct, which iozcrxifqfree() puts it down before destroying the ring.

Affected Software

2 affected components

Linux Linux kernel

Linux Linux kernel>=6.19<7.0.4

Remediation

Patch Available

https://git.kernel.org/stable/c/0fcccfd87152f957fa8312b841f6efef42a05a20

Patch Available

https://git.kernel.org/stable/c/9feb88eeda6d288f93fcfb6bca563f89e316479d

Event History

May 27, 2026

CVE Published

via MITRE·12:55 PM

Data Sourced

via MITRE·12:55 PM

Description

Data Sourced

via NVD·02:17 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs local access and low privileges. No user interaction is required.

What security impact could successful exploitation have?

Successful exploitation could affect confidentiality, integrity, and availability at a high level, according to the supplied CVSS vector.

Is a fix available?

Yes. A patch is available, with fixes referenced in the Linux stable kernel repository.

CVE-2026-45995: io_uring/zcrx: fix user_struct uaf

Affected Software

Remediation

Patch Available

Patch Available

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What security impact could successful exploitation have?

Is a fix available?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What security impact could successful exploitation have?

Is a fix available?