CVE-2026-23259 — Linux vulnerability
9 documents8 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18
Description
In the Linux kernel, the following vulnerability has been resolved:
io_uring/rw: free potentially allocated iovec on cache put failure
If a read/write request goes through io_req_rw_cleanup() and has an
allocated iovec attached and fails to put to the rw_cache, then it may
end up with an unaccounted iovec pointer. Have io_rw_recycle() return
whether it recycled the request or not, and use that to gauge whether to
free a potential iovec or not.
Affected Packages3 packages
▶CVEListV5linux/linuxa9165b83c1937eeed1f0c731468216d6371d647f — 1d5f2329ab4df65c2ee011b986d8a6e05ad0f67c+2
🔴Vulnerability Details
4GHSA▶
GHSA-q3hj-qw3j-gv7p: In the Linux kernel, the following vulnerability has been resolved:
io_uring/rw: free potentially allocated iovec on cache put failure
If a read/wri↗2026-03-18
OSV▶
CVE-2026-23259: In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: free potentially allocated iovec on cache put failure If a read/write↗2026-03-18