CVE-2026-99253 | Linux Kernel up to 7.2.13 io_uring io_uring_try_cancel_requests cq_wait_nr race condition

November 3, 2026 Yanac

A vulnerability described as critical has been identified in Linux Kernel up to 7.2.13. This vulnerability affects the function io_uring_try_cancel_requests of the component io_uring. Executing a manipulation of the argument cq_wait_nr can lead to race condition.

This vulnerability is handled as CVE-2026-99253. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More