CVE-2026-80920 io_uring: defer eventfd signaling when queued from a wakeup handler

In the Linux kernel, the following vulnerability has been resolved: iouring: defer eventfd signaling when queued from a wakeup handler ioreqlocalworkadd signals the CQ ring eventfd inline when it is the one to push the first entry onto -worklist. For DEFERTASKRUN rings that add is frequently done...

CVE-2026-80920

CVE-2026-80920 affects the Linux kernel io_uring subsystem. The root cause is that io_req_local_work_add() signals the CQ ring eventfd inline when it pushes the first entry onto ->work_list. For DEFER_TASKRUN rings, this add is frequently done from a waitqueue wakeup handler where an arbitrary...

SUSE CVE-2022-48721

In the Linux kernel, the following vulnerability has been resolved: net/smc: Forward wakeup to smc socket waitqueue after fallback When we replace TCP with SMC and a fallback occurs, there may be some socket waitqueue entries remaining in smc socket-wq, such as eppollentries inserted by userspace...