Linux Kernel io_uring Timeout Vulnerability Affecting Linux Kernel

CVE-2026-99262

What is CVE-2026-99262?

A vulnerability exists in the Linux kernel's io_uring implementation that causes timeouts to proceed even after a cancellation request has been issued. When an asynchronous operation using the io-wq framework is attempted to be canceled, there is a race condition that allows the worker to add the request to the timeout list despite a pending cancellation, leading to a scenario where tasks may be unnecessarily delayed. The cancellation is not re-checked before the timeout begins, allowing the timeout to complete even when it should not have. Proper locking mechanisms must be utilized to ensure that the cancellation state is consistently managed to prevent such delays.

References