Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are… (CVE-2025-38730)
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons: 1) If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid. 2) If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer. Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.
AI Analysis
Technical Summary
This advisory addresses two vulnerabilities in the Linux kernel packages used by Red Hat Enterprise Linux 10.0 Extended Update Support. CVE-2025-38730 is a flaw in io_uring and network buffer handling that can cause data corruption and system instability. CVE-2025-39760 is an out-of-bounds read vulnerability in USB configuration parsing that can lead to denial of service. Red Hat has released updated kernel packages to fix these issues, requiring a system reboot for the update to be effective.
Potential Impact
The vulnerabilities can cause data corruption, system instability, and denial of service conditions on affected systems running the vulnerable Linux kernel versions. These impacts can disrupt normal system operations and potentially affect availability.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 10.0 Extended Update Support and related products should apply the provided kernel updates and reboot their systems to ensure the fixes take effect. Refer to Red Hat's official update article (https://access.redhat.com/articles/11258) for detailed instructions. No other mitigation actions are indicated by the vendor advisory.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are… (CVE-2025-38730)
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons: 1) If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid. 2) If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer. Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory addresses two vulnerabilities in the Linux kernel packages used by Red Hat Enterprise Linux 10.0 Extended Update Support. CVE-2025-38730 is a flaw in io_uring and network buffer handling that can cause data corruption and system instability. CVE-2025-39760 is an out-of-bounds read vulnerability in USB configuration parsing that can lead to denial of service. Red Hat has released updated kernel packages to fix these issues, requiring a system reboot for the update to be effective.
Potential Impact
The vulnerabilities can cause data corruption, system instability, and denial of service conditions on affected systems running the vulnerable Linux kernel versions. These impacts can disrupt normal system operations and potentially affect availability.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users of Red Hat Enterprise Linux 10.0 Extended Update Support and related products should apply the provided kernel updates and reboot their systems to ensure the fixes take effect. Refer to Red Hat's official update article (https://access.redhat.com/articles/11258) for detailed instructions. No other mitigation actions are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:3124
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-39760"]
Threat ID: 6a3da1c34853345fc181f028
Added to database: 06/25/2026, 21:46:43 UTC
Last enriched: 06/25/2026, 21:55:53 UTC
Last updated: 09/10/2026, 19:24:56 UTC
Views: 95
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.