CVE record · 1 source
CVE-2026-99227
CVSS 7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_waitid packs the cancellation…
- Vendor
- Linux kernel
- Product
- Linux
- CVSS v3.1
- 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Exposure class
- Operating system
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_waitid packs the cancellation…
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_waitid packs the cancellation state into bit 31 of ->refs and uses bits 30:0 as a 31-bit reference counter…