https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:49:58 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38002 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>io_uring/fdinfo: grab ctx-&gt;uring_lock around io_uring_show_fdinfo()</p> <p>Not everything requires locking in there, which is why the &#39;has_lock&#39; variable exists. But enough does that it&#39;s a bit unwieldy to manage. Wrap the whole thing in a -&gt;uring_lock trylock, and just return with no output if we fail to grab it. The existing trylock() will already have greatly diminished utility/output for the failure case.</p> <p>This fixes an issue with reading the SQE fields, if the ring is being actively resized at the same time.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>io_uring/fdinfo: grab ctx-&gt;uring_lock around io_uring_show_fdinfo()</p> <p>Not everything requires locking in there, which is why the &#39;has_lock&#39; variable exists. But enough does that it&#39;s a bit unwieldy to manage. Wrap the whole thing in a -&gt;uring_lock trylock, and just return with no output if we fail to grab it. The existing trylock() will already have greatly diminished utility/output for the failure case.</p> <p>This fixes an issue with reading the SQE fields, if the ring is being actively resized at the same time.</p> https://vulnerability.circl.lu/vuln/cve-2025-38002