CVE WATCH / VULNERABILITY DETAIL

CVE-2026-99227

HIGHCVSS 7.8NVD feed

Published 2 November 2026 · tracked since 3 November 2026

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap io_waitid packs the cancellation state into bit 31 of ->refs and uses bits 30:0 as a 31-bit reference counter: #define IO_WAITID_CANCEL_FLAG BIT(31) #define IO_WAITID_REF_MASK

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools