CVE WATCH / VULNERABILITY DETAIL
CVE-2026-99231
HIGHCVSS 7.8NVD feed
Published 2 November 2026 · tracked since 3 November 2026
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing ->head io_waitid_remove_wq() only takes the wait queue lock if ->head is set. io_waitid_wait() clears ->head first thing, before it tries to become the owner of the request by bumpi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-119736 HIGH 8.2
- CVE-2026-120057 HIGH 7.5
- CVE-2026-120058 HIGH 7.5
- CVE-2026-105603
- CVE-2026-105604
- CVE-2026-119301 HIGH 7.9
- CVE-2026-105769 CRITICAL 9.3
- CVE-2026-99242
- CVE-2026-99236 HIGH 7.8
- CVE-2026-99237 HIGH 7.8