Threats tagged 'ghsa-f6mf-84fx-cph2'

A medium-severity vulnerability (CVE-2025-23154) in the Linux kernel's io_uring subsystem involves improper use of the io_req_post_cqe() function. The flaw arises because io_req_post_cqe() was used incorrectly by send bundle requests, which are not multishot requests. This misuse could lead to unintended behavior in the kernel's I/O completion queue handling. The issue has been fixed by adding a flag to distinguish requests that want to post multiple completion queue events (CQEs).