7.8

CVE-2025-21863

io_uring: prevent opcode speculation

In the Linux kernel, the following vulnerability has been resolved:

io_uring: prevent opcode speculation

sqe->opcode is used for different tables, make sure we santitise it
against speculations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.6 < 6.6.80
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.17
Linux ≫ Linux Kernel Version >= 6.13 < 6.13.5
Linux ≫ Linux Kernel Version 6.14 Update rc1
Linux ≫ Linux Kernel Version 6.14 Update rc2
Linux ≫ Linux Kernel Version 6.14 Update rc3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.142
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b9826e3b26ec031e9063f64a7c735449c43955e4
Patch
https://git.kernel.org/stable/c/506b9b5e8c2d2a411ea8fe361333f5081c56d23a
Patch
https://git.kernel.org/stable/c/fdbfd52bd8b85ed6783365ff54c82ab7067bd61b
Patch
https://git.kernel.org/stable/c/1e988c3fe1264708f4f92109203ac5b1d65de50b
Patch
https://git.kernel.org/stable/c/18eae8420081ef8e043ad455937bfb470ef08607
https://git.kernel.org/stable/c/d261ead565a080e3411b0dd04e6d58a52471cac8
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://git.kernel.org/stable/c/87e9eef43c758da267f6332678058a79764c7eba