CVE-2026-46274

In the Linux kernel vulnerability CVE-2026-46274, the issue lies in the work-queue (io-wq) hash handling: io_wq_remove_pending() could leave a dangling pointer in wq->hash_tail[0] when a hashed bucket-0 work is canceled with a non-hashed predecessor. The root cause was that io_get_work_hash() ...