CVE-2025-38106

A flaw was found in the Linux kernel's io_uring subsystem. A local attacker with low privileges could exploit a use-after-free vulnerability when the sq->thread object is prematurely released while still being accessed by the __io_uring_show_fdinfo() function. This flaw could lead to privilege escalation, allowing the attacker to execute arbitrary code, disclose sensitive information, or cause a system-wide denial of service.

This vulnerability is evaluated as a Moderate severity issue for Red Hat Enterprise Linux because it requires local execution privileges to create io_uring queues and read process file descriptor details via /proc. Exploitation relies on a race window during worker thread termination, limiting the attack vector exclusively to local authenticated contexts rather than remote vectors. On systems where unprivileged user access is restricted or io_uring is unused, the potential exposure is substantially minimized.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.