io_uring/rsrc: don't rely on user vaddr alignment

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 6.12affected
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d and later · before 50998b0ae7d9d552e96d8b7239981cf05f65eff5affected · git
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d and later · before f16769241594be59387b56ab525e327f54377e60affected · git
  • a8edbb424b1391b077407c75d8f5d2ede77aa70d and later · before 3a3c6d61577dbb23c09df3e21f6f9eda1ecd634baffected · git
  • before 6.12not affected · semver
  • 6.12.36 and later · up to and including 6.12.*not affected · semver
  • 6.15.5 and later · up to and including 6.15.*not affected · semver
  • 6.16 and laternot affected · original_commit_for_fix

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-74705udp: fix potential use-after-free in tunnel segmentation
  40Plan
• CVE-2026-74612veth: fix skb length accounting after XDP frag adjustment
  40Plan
• CVE-2026-74475vxlan: use neigh_ha_snapshot() in route_shortcircuit()
  40Plan
• CVE-2026-74309vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
  40Plan
• CVE-2026-74280crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
  40Plan
• CVE-2026-74279crypto: cavium/cpt - fix DMA cleanup using wrong loop index
  40Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.