CVE-2026-99231 | Linux Kernel up to 6.12.114/6.18.59/7.2.13 io_uring io_waitid_remove_wq head/refs use after free

SecurityVulns
Yanac

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.114/6.18.59/7.2.13. This issue affects the function io_waitid_remove_wq of the component io_uring. The manipulation of the argument head/refs results in use after free.

This vulnerability is identified as CVE-2026-99231. The attack is only possible with local access. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More