Wait Queue Vulnerability in Linux Kernel Affecting Multiple Versions
CVE-2026-99231

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
2 November 2026

What is CVE-2026-99231?

A wait queue vulnerability in the Linux kernel can lead to potential misuse of request handling. When the owning request is not adequately synchronized, a timing window exists that may allow another thread to complete the request and reuse it prematurely. This can result in a use-after-free scenario, causing potential data corruption or system instability. This issue underscores the necessity for robust locking mechanisms during request management to prevent race conditions and ensure data integrity.

Affected Version(s)

Linux 09951a4d37e33b0197afc7fb77e39f09a3213ee6

Linux 934ffdd1cdef232eb125e63c2ebafb7f2deff6af < 8381a912c65b8de16e8a848225c7c5a56b6ea834

Linux ab673c1bcaf20ac70352eeb6bf5b828462676693

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.