CVE-2024-35831 | BDVDB-2026-236377 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: io_uring: Fix release of pinned pages when __io_uaddr_map fails Looking at the error path of __io_uaddr_map, if we fail after pinning the pages for any reasons, ret will be set to -EINVAL and the error handler won't properly release the pinned pages. I didn't manage to trigger it without forcing a failure, but it can happen in real life when memory is heavily fragmented.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-05-17Record published in the CVE List.
2. Version 22026-05-23Most recent update recorded in the CVE List.