In the Linux kernel, the following vulnerability has been resolved: io_uring: abort file assignment prior to assigning creds We need to either restore creds properly if we fail on the file assignment, or just do the file assignment first instead. Let's do the latter as it's simpler, should make no difference here for file assignment.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2025022652-CVE-2022-49056-f882@gregkh/T
This CVE has been rejected by the Linux kernel community. Refer to the announcement: https://lore.kernel.org/linux-cve-announce/2025052053-REJECTED-0177@gregkh/ Comment added by: Automated Script