A Linux kernel feature called io_uring has revealed a vulnerability (CVE-2025-39698) that allows an unprivileged user to execute their code at the kernel level. This vulnerability is due to the lack of existence checks for objects before performing operations on them.
The vulnerability has been fixed in kernel updates 6.16.4 and 6.12.44. You can check the status of new package versions or patch preparations in distributions on the following pages (if the page is unavailable, it means the distribution developers have not yet started addressing the issue): Debian, Ubuntu, Fedora, SUSE/openSUSE, RHEL, Gentoo, and Arch.
Forrás: opennet.ru
