Leaking Kernel Memory with io_uring

In October 2025, I discovered a method to allocate kernel memory from userspace, allowing for the exceeding of a process's resource limits. This vulnerability opened the door to potential Denial of Service (DoS) attacks. In this post, I summarize my journey from the initial discovery of the bug to the submission of a patch to the Linux kernel. Introduction to io_uring Since the vulnerability…