CVE-2025-68294

A flaw was found in the Linux kernel's io_uring/net component. This vulnerability arises from an incorrect handling of vectored buffer node imports, where the system uses an improper object for managing buffer lifetimes. A local attacker could exploit this to cause a Denial of Service (DoS), making the system unavailable.

A lifetime mismatch in io_uring's vectored registered buffer import ties the buffer to the wrong io_kiocb, potentially leading to use-after-free when the main request is freed before the associated notification. A local attacker able to use io_uring with vectored registered buffers may trigger memory corruption in kernel context. The issue is locally exploitable and may allow privilege escalation due to heap UAF in the networking zero-copy path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.