Linux versions 6.4 and above suffer from an io_uring page use-after-free vulnerability via buffer ring mmap.