CVE-2023-54030

Linux Kernel 6.0-6.5.3 - Denial of Service via io_uring Multishot Recv CQE Overflow

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overflow multishot recv Don't allow overflowing multishot recv CQEs, it might get out of hand, hurt performance, and in the worst case scenario OOM the task.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/1e2db9837be7d24a2a74eb3f3906d0872bee8907

Patch

https://git.kernel.org/stable/c/b2e74db55dd93d6db22a813c9a775b5dbf87c560

Scores

EPSS 0.0015

EPSS Percentile 4.8%

Details

Status published

Products (7)

linux/Kernel 6.0.0 - 6.5.3linux

Linux/Linux < 6.0

Linux/Linux 6.0

Linux/Linux 6.5.3 - 6.5.*

Linux/Linux 6.6

Linux/Linux b3fdea6ecb55c3ceea866ff66486927e51a982b3 - 1e2db9837be7d24a2a74eb3f3906d0872bee8907

Linux/Linux b3fdea6ecb55c3ceea866ff66486927e51a982b3 - b2e74db55dd93d6db22a813c9a775b5dbf87c560

Published Dec 24, 2025

Tracked Since Feb 18, 2026