CVE-2025-38730

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. iouring deals with this and invalidates them on retry. But on the networking side, if MSGWAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

1) If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

2) If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

c56e022c0a27142b7b59ae6bdf45f86bf4b298a1

Fixed

3b53dc1c641f2884d4750fc25aaf6c36b90db606

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

c56e022c0a27142b7b59ae6bdf45f86bf4b298a1

Fixed

fe9da1812f8697a38f7e30991d568ec199e16059

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

c56e022c0a27142b7b59ae6bdf45f86bf4b298a1

Fixed

21a4ddb0f5e933f372808c10b9ac704505751bb1

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

c56e022c0a27142b7b59ae6bdf45f86bf4b298a1

Fixed

2eb7937b5fc7fcd90eab7bebb0181214b61b9283

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

c56e022c0a27142b7b59ae6bdf45f86bf4b298a1

Fixed

41b70df5b38bc80967d2e0ed55cc3c3896bba781

Affected versions

v6.*

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.10

v6.12.11

v6.12.12

v6.12.13

v6.12.14

v6.12.15

v6.12.16

v6.12.17

v6.12.18

v6.12.19

v6.12.2

v6.12.20

v6.12.21

v6.12.22

v6.12.23

v6.12.24

v6.12.25

v6.12.26

v6.12.27

v6.12.28

v6.12.29

v6.12.3

v6.12.30

v6.12.31

v6.12.32

v6.12.33

v6.12.34

v6.12.35

v6.12.36

v6.12.37

v6.12.38

v6.12.39

v6.12.4

v6.12.40

v6.12.41

v6.12.42

v6.12.43

v6.12.5

v6.12.6

v6.12.7

v6.12.8

v6.12.9

v6.13

v6.13-rc1

v6.13-rc2

v6.13-rc3

v6.13-rc4

v6.13-rc5

v6.13-rc6

v6.13-rc7

v6.14

v6.14-rc1

v6.14-rc2

v6.14-rc3

v6.14-rc4

v6.14-rc5

v6.14-rc6

v6.14-rc7

v6.15

v6.15-rc1

v6.15-rc2

v6.15-rc3

v6.15-rc4

v6.15-rc5

v6.15-rc6

v6.15-rc7

v6.15.1

v6.15.10

v6.15.2

v6.15.3

v6.15.4

v6.15.5

v6.15.6

v6.15.7

v6.15.8

v6.15.9

v6.16

v6.16-rc1

v6.16-rc2

v6.16-rc3

v6.16-rc4

v6.16-rc5

v6.16-rc6

v6.16-rc7

v6.16.1

v6.17-rc1

v6.3

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.100

v6.6.101

v6.6.102

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.67

v6.6.68

v6.6.69

v6.6.7

v6.6.70

v6.6.71

v6.6.72

v6.6.73

v6.6.74

v6.6.75

v6.6.76

v6.6.77

v6.6.78

v6.6.79

v6.6.8

v6.6.80

v6.6.81

v6.6.82

v6.6.83

v6.6.84

v6.6.85

v6.6.86

v6.6.87

v6.6.88

v6.6.89

v6.6.9

v6.6.90

v6.6.91

v6.6.92

v6.6.93

v6.6.94

v6.6.95

v6.6.96

v6.6.97

v6.6.98

v6.6.99

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1631.0,
            "function_hash": "339881970774391094418012368795465196895"
        },
        "id": "CVE-2025-38730-00e2d7b0",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21a4ddb0f5e933f372808c10b9ac704505751bb1",
        "target": {
            "function": "io_recv",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1923.0,
            "function_hash": "269231878415963570157220144045821755031"
        },
        "id": "CVE-2025-38730-027a9f00",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eb7937b5fc7fcd90eab7bebb0181214b61b9283",
        "target": {
            "function": "io_recvmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1579.0,
            "function_hash": "18073861127995322554539593111857054678"
        },
        "id": "CVE-2025-38730-03a80fe0",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21a4ddb0f5e933f372808c10b9ac704505751bb1",
        "target": {
            "function": "io_send_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2461.0,
            "function_hash": "214594291902090936556394451606026774369"
        },
        "id": "CVE-2025-38730-0bc2df7b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b53dc1c641f2884d4750fc25aaf6c36b90db606",
        "target": {
            "function": "io_recvmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1905.0,
            "function_hash": "150064859563738932513188447212740789263"
        },
        "id": "CVE-2025-38730-138db392",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21a4ddb0f5e933f372808c10b9ac704505751bb1",
        "target": {
            "function": "io_recvmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1181.0,
            "function_hash": "207264427134405751846855419076250870223"
        },
        "id": "CVE-2025-38730-178c2bdb",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe9da1812f8697a38f7e30991d568ec199e16059",
        "target": {
            "function": "io_sendmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1345.0,
            "function_hash": "22779629668004202212950965818705984906"
        },
        "id": "CVE-2025-38730-18c04bc8",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41b70df5b38bc80967d2e0ed55cc3c3896bba781",
        "target": {
            "function": "io_send",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1631.0,
            "function_hash": "339881970774391094418012368795465196895"
        },
        "id": "CVE-2025-38730-1d87f223",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eb7937b5fc7fcd90eab7bebb0181214b61b9283",
        "target": {
            "function": "io_recv",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1585.0,
            "function_hash": "102664095704109491107616667344246508629"
        },
        "id": "CVE-2025-38730-20e77709",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41b70df5b38bc80967d2e0ed55cc3c3896bba781",
        "target": {
            "function": "io_send_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1181.0,
            "function_hash": "207264427134405751846855419076250870223"
        },
        "id": "CVE-2025-38730-28ab3c60",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21a4ddb0f5e933f372808c10b9ac704505751bb1",
        "target": {
            "function": "io_sendmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "262872874048636887735687971158053479495",
                "23870420129092396108671918869388659325",
                "75193184262998621328659405998023504966",
                "295634967269021055321433918134592949860",
                "121643208934942657574000654174198543944",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "171964521510177605364745141612787494460",
                "217208852279860822738099922726949383936",
                "166124213829760394444636994797513038686",
                "118472910866874211409570036737376508072",
                "92218825621195694418558401694624930584",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "150821972768216475854502643396813581111",
                "241773999330786781439054239848690279449",
                "115140834516778094053201416088606257441",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "256901037139401089709367269315693167455",
                "63674156598329332159806706850078545012",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-38730-2f69554e",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41b70df5b38bc80967d2e0ed55cc3c3896bba781",
        "target": {
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1585.0,
            "function_hash": "102664095704109491107616667344246508629"
        },
        "id": "CVE-2025-38730-47b98d94",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eb7937b5fc7fcd90eab7bebb0181214b61b9283",
        "target": {
            "function": "io_send_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "262872874048636887735687971158053479495",
                "23870420129092396108671918869388659325",
                "75193184262998621328659405998023504966",
                "295634967269021055321433918134592949860",
                "121643208934942657574000654174198543944",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "171964521510177605364745141612787494460",
                "217208852279860822738099922726949383936",
                "166124213829760394444636994797513038686",
                "118472910866874211409570036737376508072",
                "92218825621195694418558401694624930584",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "150821972768216475854502643396813581111",
                "241773999330786781439054239848690279449",
                "115140834516778094053201416088606257441",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "256901037139401089709367269315693167455",
                "63674156598329332159806706850078545012",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-38730-51a9d8da",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eb7937b5fc7fcd90eab7bebb0181214b61b9283",
        "target": {
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1515.0,
            "function_hash": "14771285438520124778267268268583342086"
        },
        "id": "CVE-2025-38730-58c2bc4e",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe9da1812f8697a38f7e30991d568ec199e16059",
        "target": {
            "function": "io_send_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1187.0,
            "function_hash": "216983317205442207730966576650657649443"
        },
        "id": "CVE-2025-38730-5b51f08c",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41b70df5b38bc80967d2e0ed55cc3c3896bba781",
        "target": {
            "function": "io_sendmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1345.0,
            "function_hash": "22779629668004202212950965818705984906"
        },
        "id": "CVE-2025-38730-5f54b04f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21a4ddb0f5e933f372808c10b9ac704505751bb1",
        "target": {
            "function": "io_send",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1652.0,
            "function_hash": "1292033190091522189130456773748068144"
        },
        "id": "CVE-2025-38730-7df9e5ed",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41b70df5b38bc80967d2e0ed55cc3c3896bba781",
        "target": {
            "function": "io_sendmsg_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "262872874048636887735687971158053479495",
                "23870420129092396108671918869388659325",
                "75193184262998621328659405998023504966",
                "295634967269021055321433918134592949860",
                "121643208934942657574000654174198543944",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "171964521510177605364745141612787494460",
                "217208852279860822738099922726949383936",
                "166124213829760394444636994797513038686",
                "118472910866874211409570036737376508072",
                "92218825621195694418558401694624930584",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "150821972768216475854502643396813581111",
                "241773999330786781439054239848690279449",
                "115140834516778094053201416088606257441",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "256901037139401089709367269315693167455",
                "63674156598329332159806706850078545012",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-38730-8334151f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21a4ddb0f5e933f372808c10b9ac704505751bb1",
        "target": {
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "274045662643483125069104181006949808106",
                "287789026242850561550870965684141244601",
                "194713084350848611017475817845960893676",
                "137108621846799441523501118308675007046",
                "131332889753073649362576199979408218545",
                "246215141733926424165110980891701486475",
                "30791777767980768114202642486750620954",
                "191154010265100735788223081143371048922",
                "42329366459279903018208596112958024798",
                "179925328006605117358466994929266127458",
                "74884439665304606682965456174147783691",
                "87661219759570136023895857718154455262",
                "155531881274284043419448062186405426045",
                "246215141733926424165110980891701486475",
                "30791777767980768114202642486750620954",
                "191154010265100735788223081143371048922",
                "230892628668251919066743805726412395351",
                "68207262362386798559015071134917113262",
                "70716408912327032531351417593677533273",
                "310732217277192039226037088894997273573",
                "267727547101936717300236196774019591613",
                "279117419376943861412898554059706743324",
                "74884439665304606682965456174147783691",
                "79994605223168163290710010961051223394",
                "155531881274284043419448062186405426045",
                "246215141733926424165110980891701486475",
                "30791777767980768114202642486750620954"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-38730-977c7094",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b53dc1c641f2884d4750fc25aaf6c36b90db606",
        "target": {
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1752.0,
            "function_hash": "4719801587648694443660004089444820756"
        },
        "id": "CVE-2025-38730-9e9b854e",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b53dc1c641f2884d4750fc25aaf6c36b90db606",
        "target": {
            "function": "io_sendmsg_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1631.0,
            "function_hash": "339881970774391094418012368795465196895"
        },
        "id": "CVE-2025-38730-a8798e26",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41b70df5b38bc80967d2e0ed55cc3c3896bba781",
        "target": {
            "function": "io_recv",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1715.0,
            "function_hash": "184372177313368191019597682663612517472"
        },
        "id": "CVE-2025-38730-aaf397fa",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b53dc1c641f2884d4750fc25aaf6c36b90db606",
        "target": {
            "function": "io_send",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2183.0,
            "function_hash": "91150701877228587331796937289870048830"
        },
        "id": "CVE-2025-38730-bd1cd00a",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe9da1812f8697a38f7e30991d568ec199e16059",
        "target": {
            "function": "io_send",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1646.0,
            "function_hash": "125737711614827418785872906666949164157"
        },
        "id": "CVE-2025-38730-d1115aa5",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21a4ddb0f5e933f372808c10b9ac704505751bb1",
        "target": {
            "function": "io_sendmsg_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2373.0,
            "function_hash": "329145625695217246660689665085005105910"
        },
        "id": "CVE-2025-38730-d2da2a93",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b53dc1c641f2884d4750fc25aaf6c36b90db606",
        "target": {
            "function": "io_send_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1413.0,
            "function_hash": "137191246740114801376429547011773692839"
        },
        "id": "CVE-2025-38730-d729a4d5",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe9da1812f8697a38f7e30991d568ec199e16059",
        "target": {
            "function": "io_sendmsg_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1927.0,
            "function_hash": "34305938373196785570558803762264693247"
        },
        "id": "CVE-2025-38730-d745e1aa",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b53dc1c641f2884d4750fc25aaf6c36b90db606",
        "target": {
            "function": "io_recv",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1940.0,
            "function_hash": "40641230406137000580856858116694836089"
        },
        "id": "CVE-2025-38730-dcb45beb",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe9da1812f8697a38f7e30991d568ec199e16059",
        "target": {
            "function": "io_recvmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1652.0,
            "function_hash": "1292033190091522189130456773748068144"
        },
        "id": "CVE-2025-38730-e8b0536e",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eb7937b5fc7fcd90eab7bebb0181214b61b9283",
        "target": {
            "function": "io_sendmsg_zc",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1466.0,
            "function_hash": "198595404602099299667323881038036657900"
        },
        "id": "CVE-2025-38730-f1889f1a",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b53dc1c641f2884d4750fc25aaf6c36b90db606",
        "target": {
            "function": "io_sendmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1923.0,
            "function_hash": "269231878415963570157220144045821755031"
        },
        "id": "CVE-2025-38730-f1a773a3",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41b70df5b38bc80967d2e0ed55cc3c3896bba781",
        "target": {
            "function": "io_recvmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1187.0,
            "function_hash": "216983317205442207730966576650657649443"
        },
        "id": "CVE-2025-38730-f663ecf6",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eb7937b5fc7fcd90eab7bebb0181214b61b9283",
        "target": {
            "function": "io_sendmsg",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "262872874048636887735687971158053479495",
                "23870420129092396108671918869388659325",
                "75193184262998621328659405998023504966",
                "295634967269021055321433918134592949860",
                "121643208934942657574000654174198543944",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "171964521510177605364745141612787494460",
                "63674156598329332159806706850078545012",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "336880890587332198459300713176117008363",
                "121387356955498211757715010313441979850",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "150821972768216475854502643396813581111",
                "241773999330786781439054239848690279449",
                "115140834516778094053201416088606257441",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006",
                "256901037139401089709367269315693167455",
                "63674156598329332159806706850078545012",
                "325722115298868618909278035865052166940",
                "140965688276887185863073105803700397607",
                "226738020156255996588273819200814119006"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-38730-f9739696",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe9da1812f8697a38f7e30991d568ec199e16059",
        "target": {
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1345.0,
            "function_hash": "22779629668004202212950965818705984906"
        },
        "id": "CVE-2025-38730-fbd0101a",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2eb7937b5fc7fcd90eab7bebb0181214b61b9283",
        "target": {
            "function": "io_send",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 1667.0,
            "function_hash": "166138086837736816802840225072332864567"
        },
        "id": "CVE-2025-38730-fd3b4211",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe9da1812f8697a38f7e30991d568ec199e16059",
        "target": {
            "function": "io_recv",
            "file": "io_uring/net.c"
        },
        "signature_version": "v1"
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.4.0

Fixed

6.6.103

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.44

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.15.11

Type: ECOSYSTEM
Events: Introduced

6.16.0

Fixed

6.16.2