Wind River Support Network

HomeDefectsLIN1024-7886

Acknowledged

LIN1024-7886 : Security Advisory - linux - CVE-2025-21836

Created: Mar 9, 2025 Updated: Mar 13, 2025

Found In Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/kbuf: reallocate buf lists on upgrade

IORING_REGISTER_PBUF_RING can reuse an old struct io_buffer_list if it
was created for legacy selected buffer and has been emptied. It violates
the requirement that most of the field should stay stable after publish.
Always reallocate it instead.

CREATE(Triage):(User=admin) CVE-2025-21836 (https://nvd.nist.gov/vuln/detail/CVE-2025-21836)