SB20260905138 - Memory leak in Linux kernel io_uring

Description

This security bulletin contains information about 1 vulnerability.

1) Memory leak (CVE-ID: CVE-2026-80811)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a memory leak in the io_uring uring command asynchronous cleanup logic when processing asynchronous io_uring commands. A local user can submit asynchronous commands that reuse cached iovec arrays to cause a denial of service.

The issue manifests when the command cache is full and a command inherits a cached iovec array.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/7068d3587a64a24943a7c9e232976da2c9e0e303
• https://git.kernel.org/stable/c/b290de4d16d75b6c1ef42025b47f5d94eb1ec09f
• https://git.kernel.org/stable/c/b6a768aa975b9ca81b92f028bdd975d1f8237894
• https://git.kernel.org/stable/c/bb34ae5da3365699d53a756f4c96b6ea9f8ba0c1