Security tracker / CVE-2025-21863

CVE-2025-21863

io_uring: prevent opcode speculation

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in d3656344fea03 ("io_uring: add lookup table for various opcode
 carnil> needs"). Vulnerable versions: 5.6.

Bugs

Status

Branch	Status
upstream	released (6.14-rc4) [1e988c3fe1264708f4f92109203ac5b1d65de50b]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.5) [fdbfd52bd8b85ed6783365ff54c82ab7067bd61b]
6.12-upstream-stable	released (6.12.17) [506b9b5e8c2d2a411ea8fe361333f5081c56d23a]
6.6-upstream-stable	released (6.6.80) [b9826e3b26ec031e9063f64a7c735449c43955e4]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.17-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed