https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:17:20 +0000 https://cve.radiocsirt.org/vuln/cve-2022-48819 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case</p> <p>syzbot found that mixing sendpage() and sendmsg(MSG_ZEROCOPY) calls over the same TCP socket would again trigger the infamous warning in inet_sock_destruct()</p> <p>WARN_ON(sk_forward_alloc_get(sk));</p> <p>While Talal took into account a mix of regular copied data and MSG_ZEROCOPY one in the same skb, the sendpage() path has been forgotten.</p> <p>We want the charging to happen for sendpage(), because pages could be coming from a pipe. What is missing is the downgrading of pure zerocopy status to make sure sk_forward_alloc will stay synced.</p> <p>Add tcp_downgrade_zcopy_pure() helper so that we can use it from the two callers.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case</p> <p>syzbot found that mixing sendpage() and sendmsg(MSG_ZEROCOPY) calls over the same TCP socket would again trigger the infamous warning in inet_sock_destruct()</p> <p>WARN_ON(sk_forward_alloc_get(sk));</p> <p>While Talal took into account a mix of regular copied data and MSG_ZEROCOPY one in the same skb, the sendpage() path has been forgotten.</p> <p>We want the charging to happen for sendpage(), because pages could be coming from a pipe. What is missing is the downgrading of pure zerocopy status to make sure sk_forward_alloc will stay synced.</p> <p>Add tcp_downgrade_zcopy_pure() helper so that we can use it from the two callers.</p> https://cve.radiocsirt.org/vuln/cve-2022-48819