CVE WATCH / VULNERABILITY DETAIL

CVE-2026-99230

UNKNOWNCVSS 0NVD feed

Published 2 November 2026 · tracked since 3 November 2026

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in ->hash_node io_uring_cmd_del_cancelable() uses hlist_del() to take a command off ->cancelable_uring_cmd, which leaves LIST_POISON1/2 behind in ->hash_node. Requests are recycled through the

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools