漏洞标题
io_uring: 在分配凭证前中止文件分配
漏洞描述信息
在Linux内核中,已修复了以下漏洞:
io_uring:在分配凭证前中止文件分配
我们需要在文件分配失败时正确地恢复凭证,或者先进行文件分配。我们选择后者,因为它更简单,并且对于文件分配在这里不应产生任何差异。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
漏洞类别
输入验证不恰当
漏洞标题
io_uring: abort file assignment prior to assigning creds
漏洞描述信息
In the Linux kernel, the following vulnerability has been resolved:
io_uring: abort file assignment prior to assigning creds
We need to either restore creds properly if we fail on the file
assignment, or just do the file assignment first instead. Let's do
the latter as it's simpler, should make no difference here for
file assignment.
CVSS信息
N/A
漏洞类别
N/A