Linux Kernel Memory Management Flaw in Command Processing

CVE-2026-99230

What is CVE-2026-99230?

A vulnerability exists in the Linux kernel related to memory management within the io_uring command processing mechanisms. Specifically, the function io_uring_cmd_del_cancelable() improperly handles the removal of command nodes from the cancelable command list. When a command is deleted, it erroneously leaves behind LIST_POISON markers in the hash node, potentially leading to memory access violations during subsequent operations. This oversight can result in a general protection fault and undefined behavior when processing requests, especially those that have not been fully initialized. The affected areas can cause wild memory accesses and system instability, particularly when vectored futex waits are involved.

References