CVE-2024-35831
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
io_uring: Fix release of pinned pages when __io_uaddr_map fails
In the Linux kernel, the following vulnerability has been resolved: io_uring: Fix release of pinned pages when __io_uaddr_map fails Looking at the error path of __io_uaddr_map, if we fail after pinning the pages for any reasons, ret will be set to -EINVAL and the error handler won't properly release the pinned pages. I didn't manage to trigger it without forcing a failure, but it can happen in real life when memory is heavily fragmented.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 223ef474316466e9f61f6e0064f3a6fe4923a2c5 | affected | git | 0b6f39c175ba5f0ef72bdb3b9d2a06ad78621d62 | Unavailable | None listed |
| 223ef474316466e9f61f6e0064f3a6fe4923a2c5 | affected | git | 712e2c8415f55a4a4ddaa98a430b87f624109f69 | Unavailable | None listed |
| 223ef474316466e9f61f6e0064f3a6fe4923a2c5 | affected | git | 4d376d7ad62b6a8e8dfff56b559d9d275e5b9b3a | Unavailable | None listed |
| 223ef474316466e9f61f6e0064f3a6fe4923a2c5 | affected | git | 67d1189d1095d471ed7fa426c7e384a7140a5dd7 | Unavailable | None listed |
| 3f3164ce6396138747984ee9e61158e248246300 | affected | git | Unavailable | Unavailable | None listed |
| 6.5.7 | affected | semver | 6.6 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.6 | Unavailable | None listed |
| 6.6.23 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.7.11 | unaffected | semver | Unavailable | 6.7.* | None listed |
| 6.8.2 | unaffected | semver | Unavailable | 6.8.* | None listed |
| 6.9 | unaffected | original_commit_for_fix | Unavailable | * | None listed |