PT-2025-20333 · Linux+2 · Linux Kernel+2
Published
2025-05-08
·
Updated
2026-05-26
·
CVE-2025-37804
CVSS v2.0
4.3
Medium
| Vector | AV:A/AC:H/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A data-race issue has been identified in the Linux kernel related to io uring. The issue arises when the request owner changes other flag bits, causing KCSAN to complain. The problem occurs because io uring switches requests to atomic refcounting for iowq execution before any parallelism, setting REQ F REFCOUNT, and this flag is not cleared until the request completes. To resolve this, the code now skips REQ F REFCOUNT checks for iowq, as it is known to be set.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linux Kernel
Suse