Weak Memory Ordering Vulnerability in Linux Kernel Affecting Worker Creation Processes

CVE-2026-99243

What is CVE-2026-99243?

A vulnerability in the Linux kernel relates to improper memory ordering during worker creation tasks. Specifically, the function io_wq_exit_workers() did not correctly manage the exit condition of worker tasks, which could lead to an indefinite wait state for exiting tasks on weaker architectures. This issue arises because task actions are not synchronized properly with the state changes in exit indicators, causing queuing issues for worker references. The bug has been addressed by ensuring that memory barriers are correctly placed after setting the exit bit, thus improving task management integrity and performance.

References