Linux Kernel Per-Task Restriction Maintenance in io_uring

CVE-2026-80713

What is CVE-2026-80713?

A vulnerability exists in the Linux kernel affecting io_uring, where per-task restrictions are not properly maintained across execution changes. When a task utilizing io_uring transitions due to an exec call, the associated restrictions may be inadvertently dropped, allowing unrestricted access for subsequent rings created. This issue is addressed by separating the cleanup of task contexts, ensuring that restrictions remain intact throughout execution transitions.

References