CVE-2026-99266

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix buffer offsets in areas above 4GB iozcrxqueuecqe computes the offset of the buffer in its area from netiovidx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to the u64...

CVE-2026-99266 io_uring/zcrx: fix buffer offsets in areas above 4GB

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix buffer offsets in areas above 4GB iozcrxqueuecqe computes the offset of the buffer in its area from netiovidx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to the u64...

EUVD-2026-115791

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix buffer offsets in areas above 4GB iozcrxqueuecqe computes the offset of the buffer in its area from netiovidx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to the u64...