Linux Kernel Vulnerability Affecting io_uring with Stale Data Exposure

CVE-2026-46315

What is CVE-2026-46315?

A vulnerability in the Linux kernel's io_uring mechanism can lead to the exposure of stale data in userspace when utilizing the IORING_OP_WAITID operation. This occurs because the wait operation may return without properly initializing the io_waitid::info structure, resulting in old data from previously used command storage being sent to userspace. This flaw compromises the integrity of the operation and could potentially be exploited by malicious actors to gain unintended access to sensitive information. The issue has been addressed by ensuring that the result storage is cleared during the preparation phase, aligning the behavior with the standard waitid syscall's initialization process.

References