io_uring: fix io_req_prep_async with provided buffers
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffers io_req_prep_async() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-40364
Credits & Attribution
No credits recorded in the NVD database.
References
- https://git.kernel.org/stable/c/233b210a678bddf8b49b02a070074a52b87e6d43
- https://git.kernel.org/stable/c/a1b17713b32c75a90132ea2f92b1257f3bbc20f3
- https://git.kernel.org/stable/c/b86f1d51731e621e83305dc9564ae14c9ef752bf
- https://git.kernel.org/stable/c/a94592ec30ff67dc36c424327f1e0a9ceeeb9bd3
- https://git.kernel.org/stable/c/35ae7910c349fb3c60439992e2e0e79061e95382
- https://git.kernel.org/stable/c/f0ef94553868d07c1b14d7743a7e2553e5a831a3
- https://git.kernel.org/stable/c/d63b0e8a628e62ca85a0f7915230186bb92f8bb4
More from Linux
View All →Affected Vendor
Linux
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.