Threats tagged 'ghsa-g6hq-4292-hhwx'

CVE-2026-43366 is a high-severity vulnerability in the Linux kernel's io_uring subsystem related to buffer recycling. The flaw involves a missing check on whether the target buffer list is still of the legacy type when recycled, which can lead to incorrect assumptions about the buffer's state. This gap occurs between grabbing the buffer and recycling it, potentially allowing misuse if the buffer list was upgraded to a ring-provided type. The vulnerability has been addressed by adding checks to verify the existence and type of the buffer list during recycling.