CVE-2026-23275 io_uring: ensure ctx->rings is stable for task work flags manipulation

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/linux/io_uring_types.h",
      "io_uring/io_uring.c",
      "io_uring/register.c",
      "io_uring/tw.c"
    ],
    "versions": [
      {
        "version": "79cfe9e59c2a12c3b3faeeefe38d23f3d8030972",
        "lessThan": "7cc4530b3e952d4a5947e1e55d06620d8845d4f5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "79cfe9e59c2a12c3b3faeeefe38d23f3d8030972",
        "lessThan": "46dc07d5f31411cc023f3bf1f4a23a07bf6e0ed1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "79cfe9e59c2a12c3b3faeeefe38d23f3d8030972",
        "lessThan": "96189080265e6bb5dde3a4afbaf947af493e3f82",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/linux/io_uring_types.h",
      "io_uring/io_uring.c",
      "io_uring/register.c",
      "io_uring/tw.c"
    ],
    "versions": [
      {
        "version": "6.13",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.13",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.19",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.9",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]