An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimize unshare_fd(), aka CID-0f2122045b94.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Linux_kernel | Linux | 5.1 (including) | 5.8.18 (excluding) |
Linux_kernel | Linux | 5.9.0 (including) | 5.9.3 (excluding) |
Linux_kernel | Linux | 5.10-rc1 (including) | 5.10-rc1 (including) |