📌 📄 内容摘要:
邱埋葬 (@qmazon) 在 忘记Linux密码的佬们有福了，每天都有新办法 中发帖
Linux 6.15 shipped a new zero-copy receive subsystem for io_uring called ZCRX. It manages a pool of network I/O vectors (niovs) using a stack: freelist[] holds available slot indices, free_count is the depth. There is no upper bound check on free_count. Two separate kernel teardown paths both return niovs to the same freelist, and when they overlap, free_count exceeds the allocated array length...
────────── 链接信息 ──────────
🔗 论坛链接: linux.do
📎 访问地址: https://linux.do/t/topic/2142193/1
─────────────────────────────
📢 来源：LINUX DO
