Buffer Offset Vulnerability in Linux Kernel Affecting io_uring

CVE-2026-99266

What is CVE-2026-99266?

A buffer offset vulnerability has been identified in the io_uring component of the Linux kernel, which can lead to incorrect data retrieval. Specifically, the io_zcrx_queue_cqe() function incorrectly calculates buffer offsets for areas exceeding 4GB, resulting in the application receiving pointers to outdated or incorrect data. This mismanagement can lead to operational inefficiencies and potential data integrity issues, as the system may return buffers that are not owned and fail to release the actual data buffers properly.

References