Linux Kernel io_uring iovec memory leak on cache put failure
CVE-2026-23259 Published on March 18, 2026
io_uring/rw: free potentially allocated iovec on cache put failure
In the Linux kernel, the following vulnerability has been resolved:
io_uring/rw: free potentially allocated iovec on cache put failure
If a read/write request goes through io_req_rw_cleanup() and has an
allocated iovec attached and fails to put to the rw_cache, then it may
end up with an unaccounted iovec pointer. Have io_rw_recycle() return
whether it recycled the request or not, and use that to gauge whether to
free a potential iovec or not.
Products Associated with CVE-2026-23259
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 1d5f2329ab4df65c2ee011b986d8a6e05ad0f67c is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 4b9748055457ac3a0710bf210c229d01ea1b01b9 is affected.
- Version 6.18.10, <= 6.18.* is unaffected.
- Version 6.19, <= * is unaffected.