https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:15:43 +0000 https://cve.radiocsirt.org/vuln/cve-2021-3491 <p><strong>Affected:</strong> Linux kernel</p> <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> <p><strong>Affected:</strong> Linux kernel</p> <p>The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc/&lt;PID&gt;/mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (&#34;io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers&#34;) (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (&#34;io_uring: add IORING_OP_PROVIDE_BUFFERS&#34;) (v5.7-rc1).</p> https://cve.radiocsirt.org/vuln/cve-2021-3491