CVE-2026-53191

The CVE affects the Linux kernel io_uring net path in bundle recv retries. The bug arises when merging cflags during io_recv_finish(): IORING_CQE_F_BUF_MORE was not included in CQE_F_MASK, so the buf-more flag could be dropped or mis-carryed across iterations, causing userspace to advance the rin...

EUVD-2026-39282

In the Linux kernel, the following vulnerability has been resolved: iouring/net: inherit IORINGCQEFBUFMORE across bundle recv retries When a bundle recv retries inside iorecvfinish, the merge logic OR the saved cflags from the previous iteration with the cflags returned by the new iteration: cfla...