CVE-2025-21836Published
io_uring/kbuf: reallocate buf lists on upgrade
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-21836 · Microsoft / collected KEV context
cve-program · CVE-2025-21836
- https://git.kernel.org/stable/c/146a185f6c05ee263db715f860620606303c4633
- https://git.kernel.org/stable/c/7d0dc28dae836caf7645fef62a10befc624dd17b
- https://git.kernel.org/stable/c/2a5febbef40ce968e295a7aeaa5d5cbd9e3e5ad4
- https://git.kernel.org/stable/c/8802766324e1f5d414a81ac43365c20142e85603
- https://u1f383.github.io/slides/talks/2025_Hexacon-Deja_Vu_in_Linux_io_uring_Breaking_Memory_Sharing_Again_After_Generations_of_Fixes.pdf
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.