CVE-2026-99255 | Linux Kernel up to 7.2.13 io-wq io_uring_cancel_generic cur_work race condition

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.1.190/6.6.160/6.12.114/6.18.59/7.2.13. This impacts the function io_uring_cancel_generic of the component io-wq. The manipulation of the argument cur_work results in race condition.

This vulnerability is known as CVE-2026-99255. Attacking locally is a requirement. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More