SB2026032090 - Missing release of memory after effective lifetime in Linux kernel io_uring

Description

This security bulletin contains information about 1 vulnerability.

1) Missing release of memory after effective lifetime (CVE-ID: CVE-2026-23263)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to improper memory management in the io_uring/zcrx component when handling page arrays during sg initialization failure. A local user can trigger a page array leak to disclose sensitive information.

The vulnerability specifically involves failure to release the page array after a previous fix addressed page leaks but left the array un-freed.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0ae91d8ab70922fb74c22c20bedcb69459579b1c
• https://git.kernel.org/stable/c/64cf3016234ce8a6e4195ed1b2d9e2a1ae41b57d