Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to list corruption and use-after-free issues. Remove the request from the queue's list for terminated non-committed requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected c090c8abae4b6b77a1bee116aa6c385456ebef96 before a6d1f1ace16d0e777a85f84267160052d3499b6e; affected c090c8abae4b6b77a1bee116aa6c385456ebef96 before 95c39eef7c2b666026c69ab5b30471da94ea2874 |
| Linux / Linux | affected 6.14; unaffected 0 before 6.14; unaffected 6.18.3 through 6.18.*; unaffected 6.19 through * |
CWE
No CWE identifiers supplied.