Threats tagged 'ghsa-7p3q-9c8m-84x3'

A high severity vulnerability identified as CVE-2025-68317 in the Linux kernel's io_uring subsystem has been resolved. The issue involved improper handling of chained notification contexts, where zero-copy (zc) links to ubuf_info were sent only for requests from the same context. This vulnerability could lead to confidentiality, integrity, and availability impacts. The fix addresses ambiguous notification completion assumptions reported by syz tests.