Memory Leak Vulnerability in Linux Kernel Affecting io_uring Functionality

CVE-2025-40267

What is CVE-2025-40267?

A vulnerability exists in the Linux kernel's io_uring functionality that may lead to a memory leak under certain conditions. Specifically, when internal caches overflow, allocated iovecs can remain in memory if a request is aborted early. This issue stems from a previous update that did not adequately handle early cleanup, necessitating the restoration of a forced free mechanism to prevent potential memory leaks.

References