Local Work Wake-up Issue in Linux Kernel Affecting Multiple Versions

CVE-2026-99253

What is CVE-2026-99253?

This vulnerability in the Linux Kernel affects the io_uring mechanism, specifically in the management of local work wake-ups. When cancelling requests, the function io_uring_try_cancel_requests() inadvertently sets a wake-up condition that may allow a cancel operation to block indefinitely, particularly if additional requests are made while the first is still processing. This flaw can cause local tasks to become unresponsive, potentially leading to system instability or denial of service under certain conditions. Users are advised to consult recent updates and patches to mitigate exposure to this issue.

References