Buffer Overflow Vulnerability in Linux Kernel's io_uring System by Google

CVE-2025-38196

What is CVE-2025-38196?

A vulnerability exists in the Linux kernel's io_uring system, where insufficient validation of buffer counts during cloning can lead to a buffer overflow. Syzbot reports triggering a warning for excessive memory allocation attempts due to the lack of checks for buffer offset plus count exceeding maximum allowed limits. This flaw can result in unnecessary warnings and potentially impact system performance; hence, proper validation against IORING_MAX_REG_BUFFERS is crucial to prevent accessing buffers that cannot be reached.

References