Use-After-Free Vulnerability in Linux Kernel Affects io_uring Functionality

CVE-2026-98858

What is CVE-2026-98858?

A use-after-free vulnerability in the Linux kernel's io_uring implementation allows an attacker to exploit the task_work feature with SQPOLL. This occurs due to improper handling of request completion, where a context can be freed while it's still being accessed, leading to potential memory corruption and system instability. The vulnerability can compromise system integrity, emphasizing the need for timely updates and patches to safeguard against potential attacks.

References