96 matches found
CVE-2026-98858
A flaw was found in the Linux kernel's iouring subsystem. When submission queue polling SQPOLL is enabled, a race condition can cause the polling thread to free the ring context while another operation is still accessing it. A local user can exploit this use-after-free flaw to crash the system,...
Linux Distros Unpatched Vulnerability : CVE-2026-98858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it ca...
SUSE CVE-2026-98858
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
DEBIAN-CVE-2026-98858
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
CVE-2026-98858
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
UBUNTU-CVE-2026-98858
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
CVE-2026-98858
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
CVE-2026-98858
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
CVE-2026-98858 io_uring: fix task_work add use-after-free with SQPOLL
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
CVE-2026-98858 io_uring: fix task_work add use-after-free with SQPOLL
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
CVE-2026-98858
The Linux kernel contains a use-after-free vulnerability within the io_uring subsystem involving SQPOLL . The issue occurs because the sqpoll thread processes task_work off its own list, allowing io_ring_exit_work() to free the context (ctx) and tctx while io_req_normal_work_add() is still access...
EUVD-2026-103798
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
PT-2026-117077
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the io uring component when using SQPOLL. The sqpoll thread processes task work from its own list, allowing it to complete a request immediately after...
CVE-2026-98858: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iouring: fix taskwork add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs taskwork off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscqpush has published it. I...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the use of iouring in the SQPOLL scenario, where the taskwork is reclaimed and reused after release, potentially leading to memory corruption or system crashes...
Astra Linux – vulnerability in linux-5.10
An issue was found in the Linux kernel 5.10.x prior to version 5.10.155. A use-after-free in iosqpollwaitsq within fs/iouring.c enables an attacker to crash the kernel, leading to a denial of service. finishwait can be bypassed. In certain scenarios, an attack may be carried out by forking a...
CVE-2023-20909
creationtimestamp| type| source ---|---|--- 2026-09-02 05:00:04+00:00| seen| Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0 2026-09-03 00:00:43+00:00| published-proof-of-concept| Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0...
Azure Linux 3.0 Security Update: kernel (CVE-2024-41001)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41001 advisory. - In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: work around a potential...
MiracleLinux 9 : kernel-5.14.0-570.16.1.el9_6 (AXSA:2025-10431:39)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10431:39 advisory. kernel: iouring/sqpoll: zero sqd-thread on tctx errors CVE-2025-21633 kernel: soc: qcom: socinfo: Avoid out of bounds read of serial number...
