Linux Kernel io_uring Vulnerabilities Cause Memory Leaks and System Hangs
- Investigating(current)
- Trending(upcoming)
- Workaround available(upcoming)
- Resolved(upcoming)
Executive summary
Vulnerabilities in the Linux kernel's io_uring subsystem allow a local attacker to cause a denial of service via memory exhaustion or system hangs due to improper validation and memory leaks.
No verified workaround yet
None of the linked reports describe a mitigation. Follow this incident to hear when one appears.
Official fixThe io_uring subsystem contained a memory leak when handling certain asynchronous commands and failed to properly validate the size of specific query requests.
Evidence
1 report · 1 CVEShow
- [1]CVE First reportUSN-9020-1: Linux kernel vulnerabilities(opens security advisory in a new tab)
It was discovered that the io_uring subsystem in the Linux kernel contained a memory leak when handling certain asynchronous commands. A local attacker could possibly use this to cause a denial of service (memory exhaustion). (CVE-2026-80811) It was discovered that the io_uring subsystem in the Linux kernel did not properly validate the size of certain query requests. A local attacker could possibly use this to cause a denial of service (system hang). (CVE-2026-81009) It was discovered that…
by Ubuntu Security 0upvotes 0comments
Timeline
- First report on security advisory
USN-9020-1: Linux kernel vulnerabilities
Source