Linux Kernel Vulnerability in io_uring Poll Feature

CVE-2026-52933

What is CVE-2026-52933?

A vulnerability in the Linux kernel's io_uring poll feature exposes the system to potential issues due to improper signed comparisons during ownership retrieval. The function io_poll_get_ownership() inaccurately checks the value of poll_refs, which can lead to unexpected behavior when cancel flags are set. By casting the atomic read result to an unsigned integer, the issue can be rectified, ensuring that the correct logic is applied even in edge cases.

References