In the Linux kernel, the following vulnerability has been resolved:
iouring: fix ioreqprepasync with provided buffers
ioreqprep_async() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed.