Threats tagged 'ghsa-qrrw-9q98-7ph9'

A vulnerability in the Linux kernel's io_uring/net subsystem was resolved that caused overconsumption of buffers when using recv/recvmsg with the MSG_TRUNC flag. When the incoming packet is larger than the provided buffer, the net layer incorrectly returns the full packet length instead of the actual copied bytes, leading io_uring to advance the buffer ring more than it should. This issue affects specific versions of linux-hwe-edge kernel. The vulnerability has been fixed to correctly consume only the filled buffer region while preserving MSG_TRUNC semantics.