The Linux kernel's io_uring subsystem had a flaw in its NOP file-acquisition path where a file reference leak occurred if a NOP request was submitted with the IOSQE_FIXED_FILE flag set but without the IORING_NOP_FIXED_FILE flag. The code path incorrectly handled file references, causing io_put_file() to not release a reference acquired via io_file_get_normal(), resulting in a memory leak. The fix involved using the REQ_F_FIXED_FILE flag consistently to decide between fixed and normal file acquisition, folding IORING_NOP_FIXED_FILE into REQ_F_FIXED_FILE at preparation time, thus preventing the leak.

The vulnerability causes a memory leak in the Linux kernel due to unreleased file references in the io_uring NOP operation. This can lead to resource exhaustion over time, potentially affecting system stability or performance. There is no indication of direct code execution or privilege escalation from this issue.

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to resolve the file reference leak. Since this is a kernel-level issue, upgrading to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the Linux kernel vendor advisory or distribution security updates for the exact fixed versions and apply them accordingly.